CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

api-development

Develop and extend NetAlertX REST API endpoints. Use this when asked to create endpoint, add API route, implement API, or modify API responses.

57

Quality

72%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.github/skills/api-development/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

53%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is compact and fact-dense — entry point, routes, auth, and response contract are exactly the non-obvious details Claude needs. But the verbatim duplicated contract section, the absence of a concrete route-registration example, and missing test/validation steps for new endpoints keep it at the midpoint.

Suggestions

Delete the duplicated response-contract block (lines 51-59 repeat 41-49 verbatim) — one copy is sufficient.

Add a minimal executable example of registering a new route in server/api_server/ (Flask decorator + auth check + contract-compliant return) so the core task is shown, not just described.

Include a validation checkpoint in "Adding New Endpoints" (e.g., restart the Flask server and curl the new route with the Bearer token to confirm the response contract before updating the UI).

DimensionReasoningScore

Conciseness

The response-contract section is duplicated verbatim ("return {\"success\": False, \"error\": ...}\" appears twice with the same "On success:" block repeated), wasting tokens on identical content. Otherwise the body is lean, matching anchor 3; not 4 because the duplication is a clear unnecessary block, not a minor trim.

3 / 5

Actionability

Concrete items exist (entry point path, route inventory, Authorization header, response-contract snippets), but the skill's core task — adding an endpoint — lacks concrete code: no Flask route-registration example, no named function/decorator pattern. Anchor 3 ("some concrete guidance but incomplete; missing key details"); not 4 because the central workflow is told, not shown.

3 / 5

Workflow Clarity

"Adding New Endpoints" lists a 4-step sequence, but the steps are vague directives ("Follow authorization pattern", "Return proper response contract") and there is no validation or testing checkpoint (e.g., restart/reload the server or curl the new route). Anchor 3 — sequence present, checkpoints missing; not 4 because validation is entirely absent for a change affecting live API behavior.

3 / 5

Progressive Disclosure

No bundle files exist and none are needed at this size; sections are well-labeled and flat (Entry Point, Existing Routes, Authorization, Response Contract, Adding New Endpoints), so navigation is easy. Anchor 4 rather than 5 — the duplicated contract block and an inlined 12-item route inventory that could live in a reference file leave minor organization gaps.

4 / 5

Total

13

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-formed description that clearly states both capability and explicit trigger phrases in third person without filler. Main gaps are limited action specificity (generic 'develop/extend' verbs) and some missing natural synonyms.

Suggestions

Enumerate more concrete actions instead of generic verbs, e.g., "Add Flask routes under server/api_server/, enforce Bearer-token authorization, and return the {success, data|error} response contract".

Broaden trigger coverage with synonyms users naturally say, such as 'build API', 'REST endpoint', 'backend route', or 'Flask', to reach the comprehensive-synonyms anchor.

DimensionReasoningScore

Specificity

Quotes "Develop and extend NetAlertX REST API endpoints" — the domain is clearly named, but the actions ("develop", "extend") are generic and only 1-2 concrete actions are given. This matches anchor 3; it is not 4 because it lacks a list of several specific actions, and not 2 because the domain targeting is more precise than a bare 'Processes PDF files'.

3 / 5

Completeness

Explicitly answers both: what ("Develop and extend NetAlertX REST API endpoints") and when ("Use this when asked to create endpoint, add API route, implement API, or modify API responses") with concrete trigger phrases. Matches the anchor-5 exemplar structure directly.

5 / 5

Trigger Term Quality

Quotes "create endpoint, add API route, implement API, or modify API responses" — good coverage of natural phrasings users would say. Not 5 because common synonyms and variations (e.g., 'build API', 'REST', 'backend', 'HTTP handler') are missing; not 3 because the terms present go beyond a single generic keyword.

4 / 5

Distinctiveness Conflict Risk

The "NetAlertX" qualifier gives a clear niche, but generic triggers like "implement API" and "add API route" could fire for API work in other codebases. Mostly distinct with minor overlap risk — anchor 4; not 5 because the trigger set is not uniquely tied to NetAlertX.

4 / 5

Total

16

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

netalertx/NetAlertX

Path

.github/skills/api-development/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.