CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

nfr-gap-audit

Use when running a systematic, self-directed skill-and-NFR audit on a website/web-app project, covering non-functional-requirement domains (performance, accessibility, security, SEO, testing, privacy, i18n, ...). Trigger on "skill audit", "NFR audit", "audit this project for skills/gaps", "what skills am I missing", or before starting a multi-phase quality-improvement effort on a site.

70

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

85%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-engineered process skill: clearly sequenced phases with strong validation checkpoints, real feedback loops, and exemplary one-level-deep progressive disclosure verified against the actual bundle. The two minor weaknesses are occasional restatement of already-stated rules and command abstraction that, while explicitly justified by the stack-agnostic design, leaves most phases guidance-shaped rather than executable.

Suggestions

Cut restated rules, e.g. trim the Phase 4 severity-vs-domain worked example to one sentence since 'Order every GAP by severity first, across all domains' already conveys it.

Add one concrete example command set for a single common stack (e.g. a JS example of the Phase 2 baseline commands) so the 'or equivalent' pattern has an executable anchor without losing stack-agnosticism.

DimensionReasoningScore

Conciseness

Dense, rule-focused body with no explanation of concepts Claude already knows, and it cross-references instead of repeating (Phase 5 step 7 points to Definition of done; Documentation sync explicitly avoids restating CI rules). Minor over-explanation remains, e.g. Phase 4's worked example ('a High-severity Security GAP goes before a Medium-severity Performance GAP... because severity outranks domain') restates the rule just stated.

4 / 5

Actionability

Concrete elements throughout — example queries ('tessl_search "accessibility WCAG"'), an exact fetch URL, file paths (tessl.json, docs/audit/baseline-YYYY-MM-DD.json), a filled example baseline row, fixed status vocabulary, and commit grammar — but most executable commands are abstracted to 'run the project's own build, test, lint, and dependency-audit commands'. That flexibility is explicitly justified by the stack-agnostic design, yet it keeps most phases short of copy-paste readiness.

4 / 5

Workflow Clarity

Phases 0-6 are explicitly ordered with a mode-selection table with entry conditions, a Definition of done with exact verification criteria (CI green for that exact commit, live re-measure, no baseline regression), a guard-test-first feedback loop ('confirm it fails on the pre-fix commit'), failure handling ('read only the failing step's log'), explicit fallbacks for unreachable sources and missing reviewers, and literal per-domain checklists.

5 / 5

Progressive Disclosure

The body is an overview that splits all detail into 10 reference files, each clearly signaled by a markdown link at the point of need with deep anchors where relevant. Verified against the actual bundle: every referenced path exists, sibling references cross-link without pass-through stubs, and no content that belongs in a separate file is inlined.

5 / 5

Total

18

/

20

Passed

Description

86%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with explicit 'what' and 'when', excellent natural trigger phrases, and a clear niche. Its one real weakness is that the capability is described as a single composite action — enumerating the audit's concrete steps (baseline, gap analysis, improvement plan, skill install) would raise specificity and further sharpen distinctiveness.

Suggestions

Name 2-3 of the audit's concrete actions in the description, e.g. 'measures a baseline, walks per-domain gap checklists, and installs missing skills' — this lifts specificity from one composite verb to several specific actions.

Tighten the broad final trigger ('before starting a multi-phase quality-improvement effort on a site') to something less likely to collide with generic site-quality skills, e.g. 'or before planning a site-wide quality or NFR-remediation effort'.

DimensionReasoningScore

Specificity

'running a systematic, self-directed skill-and-NFR audit... covering non-functional-requirement domains (performance, accessibility, security, SEO, testing, privacy, i18n, ...)' names the domain and enumerates concrete scope, but the action list is a single composite verb — the skill's actual actions (baseline measurement, GAP classification by severity, skill installation, improvement planning) are absent. Anchor 3 ('names domain and 1-2 concrete actions, but not comprehensive') fits; it does not list several specific actions (anchor 4) but is more than minimal/generic (anchor 2).

3 / 5

Completeness

Explicitly answers both: 'what' (a systematic, self-directed skill-and-NFR audit on a website/web-app project covering listed NFR domains) and 'when' ('Use when running... Trigger on...' with concrete trigger phrases). Matches anchor 5 exactly; the 'when' is explicit with concrete triggers, not merely present (anchor 4).

5 / 5

Trigger Term Quality

Multiple natural, quoted user phrasings — "skill audit", "NFR audit", "audit this project for skills/gaps", "what skills am I missing" — including a colloquial variant. Matches anchor 5 (comprehensive natural terms including synonyms); no common variations for this niche are missing, so anchor 4 underestimates it.

5 / 5

Distinctiveness Conflict Risk

A clear niche (skill-and-NFR gap audit) with distinct quoted triggers, but the final trigger 'before starting a multi-phase quality-improvement effort on a site' is broad enough to overlap with generic site-quality/improvement skills. Matches anchor 4 ('mostly distinct; minor overlap risk with closely related skills'), not anchor 5.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

vannifr/agent-skills

Path

skills/nfr-gap-audit/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.