CtrlK
BlogDocsLog inGet started
Tessl Logo

sq-gomod-dependabot

Reviews and merges Dependabot pull requests for Go modules (gomod) at the sq repo root. Use for dependabot gomod PRs, go.mod/go.sum updates, and Go module security bumps—not site/ Bun PRs.

72

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

93%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A crisp maintainer runbook: sequenced phases, executable gh/make commands, risk triage, and a consent-gated merge with a verdict template. The only notable gap is an explicit failure-recovery loop when validation fails, which keeps workflow clarity at 4 rather than 5.

DimensionReasoningScore

Conciseness

The body is lean — operating-mode and risk tables, short copy-paste commands, and only operational knowledge Claude would not already know (e.g., the title-filter false-positive note). Re-reading anchor 4, there is no over-explanation to trim, so the lean-and-efficient anchor 5 fits best.

5 / 5

Actionability

Commands are fully executable: the `gh pr list --author 'app/dependabot' ... --jq` discovery query, `make test-short`, and `gh pr merge <n> --squash --delete-branch`, plus a concrete bootstrap check. Only trivial placeholders like `<n>`/`<module>` remain, which is appropriate for a template.

5 / 5

Workflow Clarity

Phases 0–4 are clearly sequenced with validation checkpoints (CI checks pass, `make test-short`, consent-gated merge, `--admin` restriction). It sits below anchor 5 because there is no explicit error-recovery loop (e.g., what to do when test-short fails or the PR is non-mergeable), though the verdict template records pass/fail per check.

4 / 5

Progressive Disclosure

No bundle files exist (references/, scripts/, assets/ are absent), and this single-file skill is appropriately self-contained at ~86 well-organized lines with clear section headers. Cross-links to sibling skills and repo files (AGENTS.md, go.mod) are clearly signaled and one level deep, matching the well-organized anchor 5.

5 / 5

Total

19

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A tight, well-scoped description that answers what and when explicitly with concrete trigger phrases and a useful exclusion clause. Slight room to grow on action coverage (e.g., mention validation/testing) and natural-term synonyms like "golang" or "Go dependencies".

DimensionReasoningScore

Specificity

"Reviews and merges Dependabot pull requests for Go modules (gomod) at the sq repo root" names the domain and concrete actions (reviews, merges) scoped to go.mod/go.sum. It falls short of 5 only because just two actions are listed with no validate/test action, and it is above 3 because the actions are specific rather than generic.

4 / 5

Completeness

Both halves are explicit: the what ("Reviews and merges Dependabot pull requests for Go modules (gomod) at the sq repo root") and the when ("Use for dependabot gomod PRs, go.mod/go.sum updates, and Go module security bumps"), with concrete trigger phrases plus an explicit exclusion ("not site/ Bun PRs").

5 / 5

Trigger Term Quality

Natural triggers include "dependabot gomod PRs", "go.mod/go.sum updates", and "Go module security bumps" — phrases a maintainer would actually say. A few synonyms ("golang", "Go dependencies") are missing, keeping it below the comprehensive anchor 5.

4 / 5

Distinctiveness Conflict Risk

The gomod niche is distinct and the description actively disambiguates with "not site/ Bun PRs", separating it from sibling site/actions dependabot skills. Conflict risk is minimal; it is above anchor 4 because triggers carve a clear niche rather than merely being mostly distinct.

5 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 7 suspicious

Warning

Total

15

/

16

Passed

Repository
neilotoole/sq
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.