CtrlK
BlogDocsLog inGet started
Tessl Logo

api-development

Develop and extend NetAlertX REST API endpoints. Use this when asked to create endpoint, add API route, implement API, or modify API responses.

63

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.github/skills/api-development/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is a compact, well-organized API reference with concrete auth and response-contract patterns, but it is dragged down by a duplicated response-contract block, abstract workflow steps, and a lack of validation checkpoints for endpoint creation. Progressive disclosure is handled well for a short, self-contained skill.

Suggestions

Remove the duplicated response-contract block (the "On success" / error-return example appears twice) to recover wasted tokens.

Make the "Adding New Endpoints" steps concrete and executable, e.g. show the route-registration code pattern and the exact decorator/header pattern to copy rather than "Follow authorization pattern".

Add a validation checkpoint to the workflow, such as testing the new endpoint with a Bearer-token request and confirming the success/error response contract before considering it done.

DimensionReasoningScore

Conciseness

The route list, auth, and response-contract sections are lean and avoid over-explaining concepts Claude knows, but the response contract block (the "On success" / error-return examples) is duplicated verbatim, wasting tokens. Not a 3 because of the redundant duplicate block; not a 1 because most of the content is tight and purposeful.

2 / 3

Actionability

Concrete code snippets ("return {\"success\": False, \"error\": ...}", the Bearer auth header, get_setting_value('API_TOKEN')) and a real entry-point path are present, but the core "Adding New Endpoints" steps are abstract directives ("Follow authorization pattern", "Return proper response contract") rather than executable commands. Not a 3 because the key workflow steps are vague; not a 1 because the contract/auth examples are copy-paste ready.

2 / 3

Workflow Clarity

"Adding New Endpoints" gives a 4-step sequence but no validation checkpoints for an operation that should be verified (testing the endpoint, confirming auth and the response contract). Not a 3 because explicit validate/verify feedback loops are missing; not a 1 because the steps are ordered and present.

2 / 3

Progressive Disclosure

The body is a concise overview organized into clear sections (Entry Point, Routes, Authorization, Response Contract, Adding Endpoints) with no nested references and no bundle files to disclose. Not a 2 because the structure is clean and self-contained rather than a monolithic wall or poorly signaled references.

3 / 3

Total

9

/

12

Passed

Description

90%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is strong: it states a concrete capability, scopes it to a distinct project niche, and provides explicit, natural trigger terms. The only minor gap is specificity, which lists just two verbs rather than a fuller set of concrete actions.

DimensionReasoningScore

Specificity

"Develop and extend NetAlertX REST API endpoints" names a clear domain and two actions (develop, extend), but stops short of listing multiple specific concrete actions. Not a 3 because only two verbs are given; not a 1 because the domain and actions are concrete rather than abstract.

2 / 3

Completeness

It explicitly answers what ("Develop and extend NetAlertX REST API endpoints") and when (an explicit "Use this when..." clause with several triggers). Not a 2 because the when-guidance is explicit, not merely implied.

3 / 3

Trigger Term Quality

"create endpoint, add API route, implement API, or modify API responses" are natural phrases a user would say when they need this skill, giving good coverage of common variations. Not a 2 because the trigger list is broad and user-natural rather than narrow or jargon-only.

3 / 3

Distinctiveness Conflict Risk

Scoping to "NetAlertX REST API endpoints" carves a clear project-specific niche with distinct triggers, unlikely to fire for unrelated skills. Not a 2 because the project binding and concrete triggers make overlap unlikely.

3 / 3

Total

11

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
netalertx/NetAlertX
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.