CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

setup-zoom-oauth

Use when setting up OAuth.

44

Quality

55%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/zoom/skills/setup-zoom-oauth/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is admirably lean and well-organized, but it defers essentially all substance to reference links that point to nonexistent files, and the workflow itself offers no executable specifics — no grant-flow names, Zoom endpoints, scope examples, or validation checkpoints. The result is a routing shell rather than actionable guidance. The refresh-token mistake is the one genuinely concrete, high-value detail.

Suggestions

Add executable specifics to the workflow: name the candidate grant flows with their selection criteria (e.g. authorization-code+PKCE for user context vs. client-credentials for server-to-server), and give example Zoom scopes or endpoint patterns.

Fix or inline the primary references — ../oauth/SKILL.md, ../general/SKILL.md, and ../rest-api/SKILL.md do not exist in the bundle; either ship real reference files under references/ or inline the key decision tables the steps depend on.

Add a validation checkpoint to the workflow (e.g. 'verify the token exchange with a test API call before wiring refresh logic') so auth-debugging failures are caught at a defined step rather than discovered downstream.

DimensionReasoningScore

Conciseness

Every line is task-relevant with no padding, no explanation of concepts Claude already knows (no 'OAuth is an open standard...' boilerplate), and no filler sections. This matches anchor 5: 'Lean and efficient; assumes Claude's competence; every token earns its place.'

5 / 5

Actionability

The workflow steps are high-level directives ('Determine the app model and who is authorizing whom', 'Choose the correct grant flow') with no concrete commands, endpoints, grant-flow names, or scope examples; only the Common Mistakes item about refresh-token reuse is concrete. This fits anchor 2: 'Minimal concrete guidance; high-level hints but missing the specific steps to execute.' It falls short of anchor 3 because even the pseudocode-level specificity of a named flow or decision criterion is absent.

2 / 5

Workflow Clarity

A five-step sequence is present and logically ordered, but it contains no validation checkpoints and the steps are underspecified — 'Choose the correct grant flow' offers no criteria for choosing. This matches anchor 3: 'Steps listed but validation gaps; sequence present but checkpoints missing or implicit.' It does not reach anchor 4 because there are no checkpoints at all, only an ordered list.

3 / 5

Progressive Disclosure

The body is well-sectioned and the references are clearly signaled in a dedicated 'Primary References' section, but all substantive detail is deferred to three links (../oauth/SKILL.md, ../general/SKILL.md, ../rest-api/SKILL.md) that do not exist in this bundle — the disclosure chain breaks, and step 5 ('Route into the deepest relevant reference docs') cannot be executed. This fits anchor 3: 'references present but not clearly signaled / could be better organized' territory; the broken targets are more than the 'minor organization gaps' of anchor 4.

3 / 5

Total

13

/

20

Passed

Description

32%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is lean but under-serves its purpose: it provides only a 'when' clause, no statement of what the skill does, and never mentions Zoom despite the skill being Zoom-specific. This creates high overlap risk with any other OAuth skill and weak discoverability for users who say 'Zoom login' or 'Zoom API key'.

Suggestions

State the 'what' alongside the 'when', e.g. 'Sets up Zoom OAuth apps: selects the app type and grant flow, plans scopes, and handles token exchange and refresh. Use when setting up Zoom OAuth, Zoom login, or Zoom API credentials.'

Include the platform name 'Zoom' and natural synonyms such as 'auth', 'login', 'API key', and 'access token' so the description is both distinctive and matches user phrasing.

Enumerate 2-3 concrete actions (grant-flow selection, scope planning, token refresh handling) to lift specificity from generic 'setting up OAuth' to a concrete capability list.

DimensionReasoningScore

Specificity

The description 'Use when setting up OAuth.' names the domain (OAuth) but lists zero actions — there is no statement of what the skill does. It is not pure abstract language (anchor 1), so it lands on anchor 2: 'Names the domain but actions are minimal or generic.'

2 / 5

Completeness

The 'when' is present ('Use when setting up OAuth') but the 'what' is entirely missing — nothing describes the skill's capabilities. This mirrors anchor 2's example ('Use when working with documents'): only 'when' present without 'what'.

2 / 5

Trigger Term Quality

It contains the relevant keywords 'setting up' and 'OAuth', but omits 'Zoom' — the skill's defining platform — plus common variations like 'auth', 'login', 'tokens', 'credentials', or 'API access'. This matches anchor 3: 'Some relevant keywords but missing common variations or synonyms.'

3 / 5

Distinctiveness Conflict Risk

A generic 'setting up OAuth' trigger would collide with virtually any OAuth- or auth-related skill, and the description omits the Zoom-specific niche implied by the skill name. Anchor 2 fits: 'Very broad; high overlap risk with many similar skills.'

2 / 5

Total

9

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 3 suspicious

Warning

Total

15

/

16

Passed

Repository

openai/plugins

Path

plugins/zoom/skills/setup-zoom-oauth/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.