CtrlK
BlogDocsLog inGet started
Tessl Logo

sq-gomod-dependabot

Reviews and merges Dependabot pull requests for Go modules (gomod) at the sq repo root. Use for dependabot gomod PRs, go.mod/go.sum updates, and Go module security bumps—not site/ Bun PRs.

75

Quality

94%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

93%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A concise, highly actionable maintainer workflow with clean phase sequencing and explicit consent/validation gates. The main gap is the absence of an explicit error-recovery feedback loop for failed validation or CI.

Suggestions

Add a short feedback loop in Phase 3 / Phase 4: if 'make test-short' fails, state the recovery steps (e.g., inspect 'go mod why' for indirect churn, fix, re-run) before retrying.

Explicitly state the merge precondition as a checkpoint (e.g., 'Only merge when: CI green AND test-short pass AND user consent') to make the validation gate a hard gate rather than prose.

Clarify in Phase 1 what to do when a PR touches both go.mod and site/ hunks beyond 'split judgment' — e.g., whether to merge the gomod portion and hand the site portion off, or hold the whole PR.

DimensionReasoningScore

Conciseness

Lean phase-based structure with executable command blocks and tables; assumes Claude's competence without explaining what Go modules or Dependabot are, and every line carries operational value.

5 / 5

Actionability

Provides copy-paste-ready commands throughout ('gh pr list ...', 'make test-short', 'gh pr merge <n> --squash --delete-branch', 'gh pr diff <n> --name-only') covering the common discovery/validate/merge cases.

5 / 5

Workflow Clarity

Phases 0-4 are clearly sequenced with validation checkpoints (tool bootstrap, test-short, CI-green consent gate), but there is no explicit error-recovery feedback loop (e.g., what to do when test-short fails) to reach a 5.

4 / 5

Progressive Disclosure

Well-organized single-purpose skill with clearly signaled one-level references to sibling skills (sq-site-dependabot, sq-actions-dependabot) and AGENTS.md; no nested reference chains and content is appropriately split across skills.

5 / 5

Total

19

/

20

Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A tightly scoped, third-person description that clearly states both capability and trigger conditions with strong keyword coverage and an explicit out-of-scope boundary. Minor specificity gap is the limited number of distinct verbs, but the domain scoping is excellent.

DimensionReasoningScore

Specificity

Names the domain precisely ('Dependabot pull requests for Go modules (gomod) at the sq repo root') and lists two concrete actions ('Reviews and merges'); a 5 would require broader coverage of distinct actions, but reviews+merges are the core actions for this niche.

4 / 5

Completeness

Explicitly answers what ('Reviews and merges Dependabot pull requests for Go modules ... at the sq repo root') and when ('Use for dependabot gomod PRs, go.mod/go.sum updates, and Go module security bumps') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Covers synonyms ('gomod', 'Go modules'), file extensions ('go.mod/go.sum'), and natural phrases ('Dependabot ... PRs', 'security bumps'), matching the comprehensive-coverage anchor including synonyms and extensions.

5 / 5

Distinctiveness Conflict Risk

Clear niche (Dependabot gomod PRs at the sq repo root) with an explicit negative boundary ('not site/ Bun PRs'), giving minimal conflict risk against sibling skills.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 7 suspicious

Warning

Total

15

/

16

Passed

Repository
neilotoole/sq
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.