CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

cryptotokenkit

Builds CryptoTokenKit security-token and smart-card integrations. Use for token-driver extensions, token sessions, TKSmartCard communication, NFC smart-card sessions, token-backed Keychain queries, token watching, certificate authentication, APDU handling, or PIN workflows.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured hub-and-reference skill: the body stays at the right altitude with concrete invariants, entitlements, error semantics, and verified one-level-deep references carrying the deep detail. Its weaknesses are moderate redundancy (repeated version caveats, duplicated reference listings) and the absence of any inline end-to-end workflow sequence or runnable example for the most common operations.

Suggestions

Deduplicate the reference listings (the two files appear in both 'Choose the workflow' and 'References') and state the iOS/iPadOS 26+ requirement once in a single platform section instead of six times.

Inline one compact, runnable end-to-end example — e.g., an NFC slot session (check isNFCSupported, create slot, withSession transmit, end session on all paths) — so the most common flow is executable without opening a reference file.

Tighten the overlap between 'Core invariants', 'Common Mistakes', and 'Review Checklist', which restate several of the same rules (status words, guarded optionals, NFC session teardown) three times.

DimensionReasoningScore

Conciseness

The body is dense with framework-specific invariants and contains no concept over-explanation, but "iOS/iPadOS 26+" is repeated six times, the two reference files are listed twice (Choose-the-workflow and References sections), and several invariants are restated across the invariants/mistakes/checklist sections. Efficient with trimmable redundancy — anchor 4 rather than the every-token-earns-its-place anchor at 5.

4 / 5

Actionability

Concrete guidance throughout: an executable guard-let snippet, exact entitlement strings ("com.apple.ctk-tokens", "com.apple.ctk.driver-class"), named delegate methods, and an error-to-response table. However, the common flows (APDU exchange, PIN verification, keychain query) have no inline runnable examples — that detail is deferred to the reference files — so it falls short of the copy-paste-ready coverage of anchor 5.

4 / 5

Workflow Clarity

Task-to-reference routing is unambiguous, validation requirements are explicit ("Check every APDU status word", "Verify token presence before queries"), and the error table plus review checklist provide recovery and verification checkpoints. The body lacks a consolidated step sequence for its main flows (e.g., the NFC session lifecycle), which keeps it at anchor 4's "minor validation/sequence gaps" rather than 5.

4 / 5

Progressive Disclosure

The body is a genuine overview (architecture, invariants, routing) and both referenced files are real, well-organized, one level deep, with clear topic-based routing in "Choose the workflow"; the cross-link between the two references is lateral rather than a nested chain, and the 797-line pattern detail is appropriately externalized. This matches the clear-overview/well-signaled-references anchor.

5 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-scoped description that explicitly states what the skill does and when to use it, with concrete third-person capability lists and framework-specific trigger terms. The only notable gap is missing natural terms for covered topics such as PIV card operations and smart-card reader discovery.

DimensionReasoningScore

Specificity

The description enumerates nine concrete capability areas ("token-driver extensions, token sessions, TKSmartCard communication, NFC smart-card sessions, token-backed Keychain queries, token watching, certificate authentication, APDU handling, or PIN workflows") in third-person voice, matching the comprehensive-coverage anchor rather than the minor-gaps anchor at 4.

5 / 5

Completeness

Both parts are explicit: "Builds CryptoTokenKit security-token and smart-card integrations" answers what, and an explicit "Use for..." clause with concrete trigger phrases answers when — matching the 5 anchor rather than 4, where the 'when' would be less specific.

5 / 5

Trigger Term Quality

Good natural-keyword coverage ("smart-card", "APDU", "PIN", "NFC", "Keychain", "TKSmartCard"), but it omits natural terms for topics the bundle actually covers, notably PIV cards and reader discovery. It sits between the good-coverage (4) and comprehensive-synonyms (5) anchors, noticeably above their midpoint.

4 / 5

Distinctiveness Conflict Risk

The description is scoped to a niche Apple framework with distinct triggers ("CryptoTokenKit", "TKSmartCard", "token-driver extensions") and qualified phrases ("token-backed Keychain queries"), giving minimal conflict risk; only the generic "certificate authentication" carries slight overlap with a broader security skill.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

thienqo/ios-skills

Path

skills/cryptotokenkit/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.