CtrlK
BlogDocsLog inGet started
Tessl Logo

gitlab-api

Fetches and analyzes GitLab merge request (MR) comments, metadata, and review feedback using authenticated API calls. Capabilities include fetching comment threads, retrieving reviewer feedback, filtering unresolved discussions, and generating MR activity reports. Use when the user asks about GitLab MR comments, code review discussions, review feedback, approval status, troubleshooting review delays, or needs to fetch merge request metadata via the GitLab API.

69

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

The canonical home for this skill is gitlab-api in pantheon-org/tekhne

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-structured, mostly actionable guide: a real bundled script with executable invocations, a defined output format, exit codes, and error-handling mappings. Its weaknesses are padding — generic API-hygiene anti-patterns and duplicated location/prerequisite lines — and later workflow steps that describe rather than command.

Suggestions

Trim the Anti-Patterns section to the GitLab-specific facts (X-Next-Page pagination header, ~2000 req/min rate limit, v3 removed in GitLab 11.0) and drop the generic token-security, pagination, and backoff rationales Claude already knows.

Deduplicate the repeated script location and prerequisite lines ('Location:' vs 'Script location:', and the 'Prerequisites assumed' comment in the example) into a single statement.

Make the workflow steps executable by providing concrete jq one-liners for 'Filter by System: false' and 'Group by author' instead of describing the operations in prose.

DimensionReasoningScore

Conciseness

Quotes: "WHY: PATs stored in source code are exposed in git history even after removal" and "WHY: The API enforces rate limits (typically 2000 req/min for REST); bulk operations without backoff will receive 429" — several Anti-Patterns entries explain generic API hygiene (token security, pagination, backoff) that Claude already knows, and the script location and prerequisite notes are each stated twice ("Location: .agents/skills/gitlab-api/scripts/get_mr_comments.sh" vs "Script location: .agents/skills/gitlab-api/scripts/get_mr_comments.sh (~80 lines)"). Mostly efficient overall, matching the score-3 anchor; not 2 because the bulk of the body (usage, output format, exit codes, error handling) is tight and earns its tokens.

3 / 5

Actionability

Quotes: ".agents/skills/gitlab-api/scripts/get_mr_comments.sh \"https://gitlab.com/your-group/your-project/-/merge_requests/123\"" and the workflow validation snippet "output=$(...); echo \"$output\" | grep -q \"Author:\" || { echo \"Invalid response — check token and URL\"; exit 1; }" — concrete, executable commands with a real bundled script. Not 5 because later workflow steps stay directional ("Filter by `System: false` to exclude automated messages", "Group by author, extract action items and feedback themes") without the specific jq commands to execute them — minor gaps per the score-4 anchor.

4 / 5

Workflow Clarity

Quotes: "1. Fetch and validate comments: ... grep -q \"Date:\" || { echo \"Empty or malformed response — check credentials\"; exit 1; }" and the Error Handling mappings ("**401 Unauthorized**: Token missing or invalid — Check GITLAB_TOKEN or GITLAB_PAT is set") — numbered sequences with an explicit validation checkpoint in step 1 and error-recovery guidance. Not 5 because steps 2–4 of both workflows (filter, group, compare timestamps, flag unresolved DiffNotes) lack explicit checkpoints or commands, leaving minor validation/execution gaps.

4 / 5

Progressive Disclosure

Quotes: "**Location:** `.agents/skills/gitlab-api/scripts/get_mr_comments.sh`" and "**When to Examine Script Internals:** Read script source when debugging unexpected output..." — the single bundle file (verified to exist at scripts/get_mr_comments.sh) is referenced one level deep, clearly signaled with location, usage, output format, and explicit guidance on when to open it. The body stays a well-organized overview with appropriately scoped sections; matches the score-5 anchor.

5 / 5

Total

16

/

20

Passed

Description

96%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong third-person description that states concrete capabilities and follows with an explicit, naturally phrased 'Use when' trigger clause covering both what and when. The only weakness is a slightly broad trailing trigger ('fetch merge request metadata via the GitLab API') that creates minor overlap risk with a hypothetical general GitLab skill.

DimensionReasoningScore

Specificity

Quotes: "fetching comment threads, retrieving reviewer feedback, filtering unresolved discussions, and generating MR activity reports" — multiple specific concrete actions covering the domain comprehensively, plus a clear framing action ("Fetches and analyzes GitLab merge request (MR) comments, metadata, and review feedback using authenticated API calls"). This matches the score-5 anchor (comprehensive coverage of concrete actions); not 4 because there are no meaningful gaps in what the skill does.

5 / 5

Completeness

Explicit 'what' ("Capabilities include fetching comment threads, retrieving reviewer feedback, filtering unresolved discussions, and generating MR activity reports") followed by an explicit 'Use when...' clause with concrete trigger phrases. Clearly answers both what AND when; not 4 because the 'when' is fully explicit rather than merely present.

5 / 5

Trigger Term Quality

Quotes: "GitLab MR comments, code review discussions, review feedback, approval status, troubleshooting review delays, or needs to fetch merge request metadata via the GitLab API" — natural phrases a user would actually say, with synonyms covered ("MR" defined alongside "merge request"). Matches the score-5 anchor; not 4 because both abbreviation and full-form variations plus multiple scenario phrasings are present.

5 / 5

Distinctiveness Conflict Risk

Quotes: "GitLab merge request (MR) comments" and "code review discussions" — a mostly distinct niche with targeted triggers. However the closing clause "or needs to fetch merge request metadata via the GitLab API" is broad enough to overlap with a general GitLab-API or code-review skill, matching the score-4 anchor (minor overlap risk with closely related skills) rather than 5's minimal conflict risk.

4 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
pantheon-org/tekhne
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.