CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

audit-asc-pr

Audit App-Store-Connect-CLI pull requests end to end and fix concrete defects when authorized. Use for PR review, value and blast-radius assessment, issue verification, or requested fixes before merge.

Quality

92%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

92%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An excellent instruction-only skill: lean, dense with non-obvious domain constraints, and structured as a sequenced audit workflow with reproduction, regression-test, and merge-gate validation loops. The only gap is the absence of any literal commands or GraphQL query examples, which keeps actionability at 4.

Suggestions

Include one or two copy-paste examples for the most fragile steps — e.g., a sample GraphQL query for fetching thread-aware review state, or the exact gh command shape for re-fetching head SHA/checks — so the workflow's least standard operations are fully executable without relying on AGENTS.md.

DimensionReasoningScore

Conciseness

Every line is a directive; there is no padding, no explanation of concepts Claude already knows, and no over-justification. Lines like "Do not treat a flat comment list as proof that all review threads are resolved" add non-obvious domain constraints, matching the 'lean and efficient; every token earns its place' anchor. Not a 4 because no section could be trimmed without losing actionable content.

5 / 5

Actionability

Highly concrete guidance: exact artifacts to read ("AGENTS.md", "docs/openapi/latest.json"), "disposable app 6759231657", "GitHub GraphQL" for thread state, and "Re-fetch the head SHA ... after every push". It falls short of the 'fully executable, copy-paste ready' anchor because no literal commands or query examples are included — exact commands are delegated to AGENTS.md — leaving minor gaps rather than major ones.

4 / 5

Workflow Clarity

A clearly sequenced six-phase workflow (contract → inspect → verify → fix → merge gate → hand off) with explicit validation checkpoints: "Reproduce each defect before changing code", "confirm the failure", "rerun the focused test", a full merge-gate checklist, and re-fetching state after every push. This feedback-loop-rich structure with a checklist matches the top anchor; destructive/batch operations here are gated by validation, so no cap applies.

5 / 5

Progressive Disclosure

The body is a well-organized single SKILL.md with clear section headers, no bundle files, and nothing inlined that belongs in a separate file. Detailed authority/review rules are correctly delegated one level deep to AGENTS.md with clearly signaled references, matching the 'clear overview with well-signaled one-level-deep references' anchor.

5 / 5

Total

19

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person imperative voice, explicit what and an explicit 'Use for' trigger clause, tightly scoped to the ASC CLI PR-audit niche. Trigger coverage is good though a few natural synonyms are missing, keeping it just short of full marks.

DimensionReasoningScore

Specificity

The what-clause gives two concrete actions ("Audit ... pull requests end to end and fix concrete defects when authorized") and the use-for clause enumerates several more (PR review, value and blast-radius assessment, issue verification), matching the 'several specific actions with minor gaps' anchor. It is not a 5 because the actions are named without finer-grained sub-capabilities, and not a 3 because more than 1-2 actions are explicitly listed.

4 / 5

Completeness

Explicitly answers both: what ("Audit App-Store-Connect-CLI pull requests end to end and fix concrete defects when authorized") and when ("Use for PR review, value and blast-radius assessment, issue verification, or requested fixes before merge") with concrete trigger phrases. Both elements are explicit and concrete, matching the top anchor; a 4 would require the 'when' to be less specific than it is.

5 / 5

Trigger Term Quality

Natural terms users would say are present: "PR review", "pull requests", "fix", "before merge", "issue verification". A few common synonyms ("code review", "approve", "check CI") are missing, matching the 'good keyword coverage; a few natural terms missing' anchor rather than the comprehensive-synonym coverage of a 5.

4 / 5

Distinctiveness Conflict Risk

The description is scoped to a named niche (App-Store-Connect-CLI pull requests) with distinct trigger phrases, so it is unlikely to fire for unrelated skills. Clear niche with minimal conflict risk matches the top anchor; generic phrasing that would create overlap with general code-review skills is absent.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

rorkai/App-Store-Connect-CLI

Path

.agents/skills/audit-asc-pr/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.