CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

api-auditor

Expertise in auditing and testing API endpoints. Use when the user asks to "check", "test", or "audit" a URL or API.

Quality

80%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./.agent/skills/basic-sample-api-auditor/SKILL.md

The canonical home for this skill is api-auditor in saeed-vayghan/gemini-agent-skills

SKILL.md
Quality
Evals
Security

Quality

Content

72%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, well-organized instruction body that correctly points to an existing bundled script. It loses points for omitting the concrete command to invoke that script and for lacking explicit validation checkpoints in its workflow.

Suggestions

Add the exact invocation command, e.g. 'Audit: Run `node scripts/audit.js <url>` to check the endpoint status.'

Include a lightweight validation/checkpoint step, such as confirming a non-2xx status triggers the Report step before proceeding to the Secure reminder.

Specify expected output interpretation (e.g. what a HEAD timeout vs. a 5xx means) so the Report step is more concrete.

DimensionReasoningScore

Conciseness

A lean six-line body that assumes Claude's competence and explains no background concepts; every line directs an action, matching the 'lean and efficient' anchor.

5 / 5

Actionability

It references a real bundled script ('scripts/audit.js') but never shows the invocation command (e.g. 'node scripts/audit.js <url>'), leaving a key execution detail missing per the 'incomplete, missing key details' anchor.

3 / 5

Workflow Clarity

Three steps are clearly sequenced (Audit, Report, Secure) but there are no validation checkpoints or feedback loops, matching the 'steps listed but validation gaps' anchor.

3 / 5

Progressive Disclosure

Under 50 lines, well-organized with labeled steps, and the single bundle reference ('scripts/audit.js') is real and one level deep, satisfying the simple-skill exception for a top score.

5 / 5

Total

16

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A concise, well-structured description with an explicit 'Use when' trigger clause and natural keyword coverage. Its main weakness is that the named actions ('auditing and testing') are somewhat generic rather than enumerating concrete capabilities.

DimensionReasoningScore

Specificity

Names the domain ('API endpoints') and one-to-two concrete actions ('auditing and testing') but the actions are generic and not comprehensive, matching the '1-2 concrete actions, but not comprehensive' anchor.

3 / 5

Completeness

Explicitly answers what ('Expertise in auditing and testing API endpoints') and when with concrete trigger phrases ('Use when the user asks to...'), matching the 'clearly and explicitly answers both' anchor.

5 / 5

Trigger Term Quality

Includes natural user phrases '"check", "test", or "audit" a URL or API' with good synonym coverage; not quite the comprehensive extension/synonym spread of the level-5 example.

4 / 5

Distinctiveness Conflict Risk

Targets a clear API-auditing niche with specific triggers, but 'check/test' could overlap with adjacent web/QA skills, so minor overlap risk keeps it just below 5.

4 / 5

Total

16

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

saeed-vayghan/gemini-agent-skills

Path

.agent/skills/basic-sample-api-auditor/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.