CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

dep-radar

Load to run or tune a dependency sweep.

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./.agents/skills/dep-radar/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

96%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is an exemplary lean orchestration document: a named pipeline, explicit validation and failure handling, concrete paths and commands, and a genuine contract table, with repo-specific detail correctly delegated to a self-maintaining inventory. Its only structural gap is that the ~80-line single file keeps the playbook and operating-policy detail inline rather than splitting them into one-level-deep reference files.

DimensionReasoningScore

Conciseness

The body is dense, lean instruction with zero padding: no explanation of concepts Claude already knows, no throat-clearing, no restatement. Every line carries policy ("never infer from version numbers", "never a third party, never hand-computed from a local download alone", "never ship a partial bump"). It matches anchor 5 ("lean and efficient; assumes Claude's competence; every token earns its place") — the long operating-policy table row is dense but every clause is a distinct contract term, not verbosity.

5 / 5

Actionability

For an instruction-only skill the guidance is as concrete as a repo-generic engine can be: exact file paths (`docs/dep-radar/inventory.md`, `docs/dep-radar/last-seen.json`, `tmp/dep-radar/report-<YYYY-MM-DD>.md`), copy-paste commands (`pnpm -r outdated`, `pnpm audit`, `cargo update --dry-run`, `cargo audit`), per-surface check/verify columns, the exact PR-body contents, and error-output requirements on failure. Where commands are necessarily repo-specific they are delegated to a self-maintaining inventory the skill itself wires in Phase 0, so no common case is left uncovered — matching anchor 5.

5 / 5

Workflow Clarity

The pipeline is stated up front ("inventory → detect → research → classify → upgrade-with-fixes → report") and each phase then follows that order with explicit validation checkpoints: "Run the verify command; open the PR only once it passes locally", "A blocker mid-apply or a failed verification stops the surface and makes it a report item with the exact error output", a fast-path stop in Phase 1 when nothing moved, and a full test-suite gate on fork syncs. This is a batch operation (many bumps, PRs) with real feedback loops, matching anchor 5 ("clear sequence with explicit validation steps; feedback loops for error recovery").

5 / 5

Progressive Disclosure

No bundle files exist (no references/, scripts/, or assets/), so the skill is a single ~80-line file — well-sectioned with a phase-per-header, a rule table, a playbook table, and guardrails, so navigation is easy. It is above anchor 3 (structure is good, nothing is buried) but below anchor 5: the body exceeds the under-50-lines simple-skill case, and the Technology playbooks table (~15 lines of per-surface detail) plus the operating-policy contract are candidates for a one-level-deep reference file, which would leave SKILL.md as a leaner overview. This matches anchor 4 ("good structure; most content appropriately placed; minor organization gaps").

4 / 5

Total

19

/

20

Passed

Description

45%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is minimal to a fault: eight words that name the domain but omit every concrete capability, natural trigger phrase, and use-when condition. The rich detail (pinned versions, upstream checks, upgrades with fallout fixed in one PR per surface) lives in the separate `summary` field instead of the description, so the description alone undersells and under-triggers the skill.

Suggestions

Move the concrete capabilities from `summary` into `description`: e.g. "Sweeps every pinned version in the repo (deps, SDKs, vendored forks, model weights), checks upstream, and lands upgrades with their fallout fixed in one PR per surface."

Add an explicit trigger clause: "Use when the user asks to update, upgrade, or audit dependencies, check for outdated packages, or bump pinned versions/lockfiles."

Use third person declarative voice ("Sweeps...", "Lands...") rather than the imperative "Load to run or tune..." to match the rubric's voice requirement.

DimensionReasoningScore

Specificity

The description "Load to run or tune a dependency sweep" names the domain ("dependency sweep") but the only actions are the generic verbs "run" and "tune" — it never says what the sweep covers (pinned versions, deps, SDKs, forks, model weights) or what it produces (upgrades landed with fallout fixed). This matches anchor 2 ("Names the domain but actions are minimal or generic"). It is above anchor 1 because a concrete domain is named, but below anchor 3 because no concrete capability (checking upstream, fixing fallout, one PR per surface) is stated; those details exist only in the separate `summary` field, not the description.

2 / 5

Completeness

The "what" is present but shallow ("run or tune a dependency sweep" — what the sweep does is unstated), and the "when" is only weakly implied by "Load to", with no "Use when..." clause or equivalent trigger guidance, which caps completeness at 3 per the judging guidelines. It is above anchor 2 ("vague what and no when") because a named function plus a load-trigger is more than pure vagueness, and below anchor 4 because the when-condition is never explicitly stated.

3 / 5

Trigger Term Quality

"dependency sweep" is one relevant keyword users might plausibly say, comparable to the anchor-3 example "Works with PDF files". It is below anchor 4 because the natural phrases users actually say are missing: "update/upgrade dependencies", "outdated packages", "bump deps", "lockfile", "audit"; "sweep" is skill-internal jargon rather than a natural user term, which keeps it from anchor 2 only because "dependency" itself is genuinely a user-spoken word.

3 / 5

Distinctiveness Conflict Risk

"dependency sweep" carves out a somewhat specific niche (dependency upgrading/maintenance), but the description gives no distinguishing detail, so it could still overlap with any other dependency-update, upgrade, or release-management skill. It sits between anchor 2 ("very broad; high overlap") and anchor 4 ("mostly distinct"), landing on 3: somewhat specific but real overlap risk with closely related dependency tooling.

3 / 5

Total

11

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

vanillagreencom/kendex

Path

.agents/skills/dep-radar/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.