CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

auth-testing

Test OAuth2 token refresh and session expiry locally. Use when working on auth, tokens, SSO, OIDC, or session management features.

87

1.11x
Quality

84%

Does it follow best practices?

Impact

100%

1.11x

Average score across 3 eval scenarios

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-organized body that assumes Claude's competence and provides copy-paste-ready commands, config, and debugging steps for each test scenario. The only gaps are a slightly long single-file layout and a missing verification step in the unlimited-session scenario.

DimensionReasoningScore

Conciseness

The body is dense with tables, commands, and config snippets, and never explains OAuth2/OIDC concepts Claude already knows. Minor redundancy (maxSessionDuration config appears in both scenario 3 and its dedicated section) keeps it just below the lean-everywhere anchor 5.

4 / 5

Actionability

Everything is executable: 'pnpm dev:with-auth', exact URLs and ports, YAML/TypeScript config snippets, curl commands for the OIDC discovery and refresh endpoints, and exact file paths. These cover the common cases copy-paste ready.

5 / 5

Workflow Clarity

Scenarios 1 and 2 give numbered steps with expected outcomes ('Observe /auth/refresh request', 'should redirect to OIDC login page'), and a debugging section supports recovery. Scenario 3 lists only config changes with no verification steps, so explicit validation coverage is incomplete versus anchor 5.

4 / 5

Progressive Disclosure

With no bundle files, this is a single self-contained document that is well-sectioned and easy to navigate (Quick Start, Scenarios, Debugging, Related Files). At ~160 lines with a default-values table that will drift as the repo changes, it sits just below the ideal structure of anchor 5.

4 / 5

Total

17

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description that clearly and explicitly states both what the skill does and when to use it, with mostly natural trigger terms. The only weakness is modest action coverage in the 'what' clause, which names just the two headline test scenarios.

Suggestions

Expand the 'what' clause with 1-2 more concrete actions the skill supports (e.g., 'configure TTLs and maxSessionDuration, debug auth cookies and refresh logs') to raise specificity.

Add natural trigger variations such as 'login', 'token expiry', or 'refresh tokens' to broaden keyword coverage for users who phrase the need differently.

DimensionReasoningScore

Specificity

The description names the domain ("OAuth2 token refresh and session expiry") with exactly two concrete actions, matching the 1-2-actions anchor. It does not list the fuller range of capabilities the skill actually covers (debugging auth, config tuning, cookie inspection), so it is below the 'several specific actions' of 4.

3 / 5

Completeness

It explicitly answers both 'what' ('Test OAuth2 token refresh and session expiry locally') and 'when' ('Use when working on auth, tokens, SSO, OIDC, or session management features') with concrete trigger phrases, mirroring the anchor-5 example structure.

5 / 5

Trigger Term Quality

Triggers 'auth, tokens, SSO, OIDC, or session management' are natural terms users would say, giving good keyword coverage. Common variations like 'login', 'refresh token', or 'token expiry' are missing, keeping it below the comprehensive coverage of 5.

4 / 5

Distinctiveness Conflict Risk

The OAuth2/OIDC local-testing niche is mostly distinct with specific technical triggers. The broad 'auth' keyword creates minor overlap risk with general auth-implementation skills, so it is not the minimal-conflict 5.

4 / 5

Total

16

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

temporalio/ui

Path

.claude/skills/auth-testing/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.