CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

api-endpoint-builder

Builds reviewable REST API endpoint scaffolds with validation, error handling, authentication, and documentation. Follows best practices for security and scalability.

Quality

68%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/api-endpoint-builder/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers strong, executable Express.js examples across the endpoint-building lifecycle, which is its main strength. Its weaknesses are padding with concepts Claude already knows (status codes, CRUD conventions), an implicit rather than explicit workflow with no validation checkpoints, and a monolithic single-file structure with no progressive disclosure into reference files.

Suggestions

Move the testing example, documentation template, and pagination/filtering code into one-level-deep reference files (e.g. references/testing.md, references/patterns.md) linked from a concise SKILL.md overview.

Cut sections that restate common knowledge — the HTTP status-code list, the CRUD verb listing, and the 'Key Principles' recap — keeping only project-specific conventions.

Add an explicit numbered build workflow with checkpoints, e.g. '1. Define route + middleware chain, 2. Validate inputs, 3. Implement handler, 4. Run the security checklist, 5. Write/verify tests before declaring done.'

DimensionReasoningScore

Conciseness

The core code sections earn their tokens, but several sections teach what Claude already knows: the full HTTP status-code list ('200 - Success (GET, PUT, PATCH)...'), the CRUD verb listing, and a 'Key Principles' section that restates earlier content. Mostly efficient with unnecessary sections that could be trimmed, matching the anchor 3 example.

3 / 5

Actionability

Concrete, copy-paste-ready Express code covers validation middleware, handler implementation, centralized error handling, pagination, filtering/sorting, documentation, and tests. Minor gaps keep it below 5: the 'authenticate' middleware is referenced but never implemented, and db/bcrypt setup is assumed (acknowledged only in the closing paragraph).

4 / 5

Workflow Clarity

The 'Endpoint Structure' 1-2-3 sections and Security Checklist imply a build order, but there is no explicit sequenced workflow with validation checkpoints (no verify/fix/retry loop, no 'test before done' step); the sequence and checkpoints are implicit rather than stated.

3 / 5

Progressive Disclosure

Roughly 330 lines are inlined in a single SKILL.md with no bundle files at all; the testing example, documentation template, and pagination/filtering code are prime candidates for one-level-deep reference files. Section headers are well-organized (above anchor 2's 'minimal structure'), but content that should be separate is inline.

3 / 5

Total

13

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has a clear, specific statement of what the skill does, but it entirely lacks any 'when to use' trigger guidance and ends with a vague best-practices flourish. Adding an explicit 'Use when...' clause with natural trigger phrases would lift it substantially.

Suggestions

Add a 'Use when...' clause with concrete triggers, e.g. 'Use when the user asks to create an API endpoint, build a REST API, or add routes/CRUD operations to an existing backend.'

Remove or replace the vague 'Follows best practices for security and scalability' sentence, which adds no concrete capability and reads as filler.

Include natural trigger synonyms users actually say ('route', 'CRUD', 'controller', 'backend endpoint') to broaden trigger-term coverage.

DimensionReasoningScore

Specificity

Names the domain ('REST API endpoint scaffolds') and four concrete capabilities ('validation, error handling, authentication, and documentation'), matching the several-specific-actions anchor; the trailing 'Follows best practices for security and scalability' is generic padding rather than additional concrete actions, so not 5.

4 / 5

Completeness

The 'what' is clear (builds scaffolds with validation, error handling, authentication, documentation), but there is no 'Use when...' clause or equivalent explicit trigger guidance, which caps completeness at 3 per the judging guidelines.

3 / 5

Trigger Term Quality

'REST API' and 'endpoint' are natural phrases users say when needing this skill, giving good keyword coverage, but common variations like 'route', 'CRUD', or 'controller' are missing, so it falls short of comprehensive synonym coverage.

4 / 5

Distinctiveness Conflict Risk

'REST API endpoint scaffolds' carves a mostly distinct niche, but the generic 'Follows best practices for security and scalability' phrasing creates minor overlap risk with general security or backend-development skills.

4 / 5

Total

15

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

sickn33/agentic-awesome-skills

Path

skills/api-endpoint-builder/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.