CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

prefect-secrets-to-orchestra

Use this skill when the user has Prefect Secret blocks, SecretStr fields, SecretDict, or prefect.blocks.system.Secret usage to move into Orchestra. Triggers: any Prefect code using Secret.load(), .get_secret_value(), SecretStr type annotations, or external secret-store blocks (AWS Secrets Manager, Azure Key Vault) storing credentials. Never asks for real secret values — produces a checklist of what to re-enter directly in Orchestra.

Quality

80%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/migrate-to-orchestra/skills/prefect-secrets-to-orchestra/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-structured migration guide whose value density is diluted by repeated Credential Store and no-bulk-export explanations across four sections. The workflow is clearly sequenced with a final validation step, though error-recovery loops sit in Gotchas rather than the steps.

Suggestions

Consolidate the duplicated guidance: 'no bulk export' appears in both Overview and Gotchas, and Credential Store instructions repeat across the Parameter Mapping table, Conversion Steps, and Gotchas — state each once and cross-reference.

Split the long Gotchas bullets on Credential Store behavior (JSON key matching, save-time validation, store-connection ordering) into a short reference file or tighter imperative lines.

DimensionReasoningScore

Conciseness

Nearly all content is non-obvious product knowledge, but there is real repetition: 'no bulk export' appears in both the Overview and Gotchas, and Credential Store guidance recurs across the Parameter Mapping table, Conversion Steps, and Gotchas, with several long run-on bullets ('worth saying in the checklist, since it's the part of the old Prefect workflow that disappears'). This is more than the minor trimming of anchor 4 but well short of the padding of anchor 2.

3 / 5

Actionability

Guidance is fully executable: concrete search patterns ('Secret.load(', '.get_secret_value()', 'SecretDict'), runnable Python and YAML examples, exact UI paths ('Python connection → Advanced → Environment Variables'), exact JSON key names ('snowflake_account', 'snowflake_user', 'snowflake_password'), and a rendered checklist template covering the common cases. This matches anchor 5.

5 / 5

Workflow Clarity

The Conversion Steps are a clearly sequenced checklist with an explicit final validation step ('verify each pipeline runs successfully in a test environment before promoting to production'). It falls short of anchor 5 because error recovery (the save-time mismatch check) is described in Gotchas rather than as an if-fails-then-fix loop within the steps.

4 / 5

Progressive Disclosure

The body is well-sectioned with a clear References list of external doc URLs and clearly signaled sibling skills, and no bundle files exist to organize. Minor gap: the deep Credential Store detail in Gotchas (JSON key matching, store-connection ordering, beta caveats) could live in a separate reference file, keeping it at anchor 4 rather than 5.

4 / 5

Total

16

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with an explicit when-clause, concrete code-pattern triggers, and a clear statement of what it produces. Its main gaps are a single-action 'what' (checklist production only, omitting the external-store pass-through) and slight trigger overlap with the sibling connections skill.

Suggestions

Mention the Credential Store pass-through for secrets already in AWS Secrets Manager or Azure Key Vault so the 'what' covers more than checklist production.

Add a natural-language trigger phrase like 'migrate Prefect secrets to Orchestra' alongside the code-pattern triggers.

DimensionReasoningScore

Specificity

The description names the domain and objects precisely ('Prefect Secret blocks, SecretStr fields, SecretDict, or prefect.blocks.system.Secret') but lists only one concrete action — 'produces a checklist of what to re-enter directly in Orchestra' — leaving capabilities like the Credential Store pass-through unstated. This matches anchor 3 (domain plus 1-2 concrete actions) rather than 4, which requires several distinct actions.

3 / 5

Completeness

Both halves are explicit: 'Use this skill when the user has Prefect Secret blocks... Triggers: any Prefect code using Secret.load()...' answers when with concrete trigger phrases, and 'produces a checklist of what to re-enter directly in Orchestra' plus 'Never asks for real secret values' answers what. This matches the anchor-5 example structure.

5 / 5

Trigger Term Quality

Good coverage of the terms that would appear in Prefect code and user requests ('Secret.load()', '.get_secret_value()', 'SecretStr type annotations', 'AWS Secrets Manager', 'Azure Key Vault'). It falls short of anchor 5 because a few natural phrasings (e.g. 'migrate Prefect secrets to Orchestra') are missing and 'SecretStr' is repeated as technical restatement rather than adding new synonyms.

4 / 5

Distinctiveness Conflict Risk

It occupies a clear niche (Prefect secret blocks moving to Orchestra) with distinct triggers, but 'SecretStr fields' in the trigger overlaps with the sibling prefect-connections-to-orchestra skill, which the body says handles SecretStr fields inside credential blocks. Minor overlap with a closely related skill fits anchor 4 rather than 5.

4 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

referenced_paths_exist

Referenced path issues: 3 missing

Warning

Total

15

/

16

Passed

Repository

orchestra-hq/orchestra-skills

Path

skills/migrate-to-orchestra/skills/prefect-secrets-to-orchestra/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.