CtrlK
BlogDocsLog inGet started
Tessl Logo

claims

Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.

95

1.79x
Quality

93%

Does it follow best practices?

Impact

97%

1.79x

Average score across 3 eval scenarios

SecuritybySnyk

Medium

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Quality

Content

87%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a tight, actionable command reference with concrete examples and clean sectioning. Its main gap is the lack of a sequenced workflow with validation feedback loops for the security-sensitive grant/revoke operations.

Suggestions

Add a short workflow for granting/revoking that ends with a verification step, e.g. 'After granting, run `npx claude-flow claims check --agent <id> --claim <c>` to confirm the claim took effect.'

Before revoking a claim, include a checkpoint to confirm the agent no longer needs it (e.g. list current claims and review dependent operations), since revocation can break running agents.

Add guidance on escalating from `minimal`/`standard` to `elevated`/`admin` security levels as an explicit, ordered procedure rather than only a static lookup table.

DimensionReasoningScore

Conciseness

Lean tables and copy-paste command blocks with no padding or explanation of concepts Claude already knows; every section earns its place. The '## Purpose' line lightly reiterates the description but is minor.

3 / 3

Actionability

Commands like 'npx claude-flow claims grant --agent agent-123 --claim write --scope "/src/**"' are fully executable, specific, and copy-paste ready.

3 / 3

Workflow Clarity

Commands are listed but not sequenced into a workflow with validation checkpoints; granting/revoking permissions is security-sensitive, so the absence of a verify-after-step (e.g. 'claims check' to confirm) caps this at 2 per the destructive-operation guideline.

2 / 3

Progressive Disclosure

No bundle files exist and the body is a short, well-organized self-contained reference with clear sections, satisfying the simple-skill allowance for well-organized content.

3 / 3

Total

11

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is concise, concrete, and well-structured: it lists specific actions, provides explicit use/skip triggers, and occupies a clear niche. Voice is appropriately impersonal and free of fluff or over-claims.

DimensionReasoningScore

Specificity

Names multiple concrete actions — 'Grant, revoke, and verify permissions' — plus the domain, matching the anchor for listing several specific concrete actions.

3 / 3

Completeness

Explicitly states what it does ('Claims-based authorization... Grant, revoke, and verify permissions') and when to use it via the 'Use when:' clause, answering both clearly.

3 / 3

Trigger Term Quality

'permission management, access control, secure operations, authorization checks' are natural terms a user would say, giving good coverage without relying on jargon.

3 / 3

Distinctiveness Conflict Risk

The multi-agent claims-authorization niche with its distinct trigger terms ('access control', 'authorization checks') is unlikely to overlap with unrelated skills.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
ruvnet/ruflo
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.