CtrlK
BlogDocsLog inGet started
Tessl Logo

claims

Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.

87

1.79x
Quality

81%

Does it follow best practices?

Impact

97%

1.79x

Average score across 3 eval scenarios

SecuritybySnyk

Medium

Suggest reviewing before use

The canonical home for this skill is claims in ruvnet/claude-flow

SKILL.md
Quality
Evals
Security

Quality

Content

80%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is concise and highly actionable with executable commands and well-structured reference tables. Its main gap is the absence of a verify-after-change loop for destructive permission grants/revokes, which caps workflow clarity.

Suggestions

Add a verification step after grant/revoke commands (e.g. 'Run `claims check` to confirm the claim took effect') to create a validate-feedback loop for destructive permission changes.

Drop or fold the 'Purpose' section into the existing header to avoid restating the frontmatter description and tighten token efficiency.

Make the 'Best Practices' bullets more concrete by linking each to a specific command (e.g. 'Scope claims to specific resources: prefer `--scope "/src/**"` over `*`).

DimensionReasoningScore

Conciseness

Lean tables and direct commands assume Claude's competence; the standalone 'Purpose' section restates the frontmatter description and the Best Practices bullets are slightly generic, keeping it just below a 5.

4 / 5

Actionability

Copy-paste ready 'npx claude-flow claims check/grant/revoke/list' commands with concrete flags and example values cover all common operations, supplemented by reference tables for claim types, scopes, and security levels.

5 / 5

Workflow Clarity

Each command is individually clear, but grant/revoke are destructive permission changes with no validation or verification step (e.g. run 'check' after 'grant' to confirm), so the destructive-operation cap of 3 applies.

3 / 5

Progressive Disclosure

A simple single-purpose skill with no need for external references; the body is cleanly organized into well-labeled sections (Claim Types, Commands, Scope Patterns, Security Levels, Best Practices), satisfying the simple-skill exception.

5 / 5

Total

17

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A well-crafted description that clearly states capabilities and provides explicit use/skip triggers in third-person imperative voice. It is comprehensive on completeness and only slightly broad on the 'secure operations' trigger.

DimensionReasoningScore

Specificity

Names three concrete actions ('Grant, revoke, and verify permissions') plus the claims-based authorization domain, but stops short of the comprehensive multi-action coverage of a 5.

4 / 5

Completeness

Explicitly answers both what ('Claims-based authorization... Grant, revoke, and verify permissions') and when ('Use when: ...', 'Skip when: ...') with concrete trigger phrases.

5 / 5

Trigger Term Quality

'permission management, access control, secure operations, authorization checks' are natural phrases a user would say, with good synonym coverage, though 'secure operations' is somewhat generic.

4 / 5

Distinctiveness Conflict Risk

The 'Claims-based authorization' niche is mostly distinct with specific triggers, but 'secure operations' carries minor overlap risk with a broader security/auth skill.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
ruvnet/ruflo
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.