CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

update-harness-dependencies

Update the primary SDK dependencies of harness packages. Use when asked to update the harness SDKs or harness adapter dependencies.

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a strong, highly executable runbook: exact commands for every harness, explicit minimum-release-age handling, and a verification script with an iterate-until-pass feedback loop that properly guards a batch update operation. Remaining weaknesses are minor — some duplicated example commands, a hardcoded release-age value that could drift from pnpm-workspace.yaml, and slightly uneven section hierarchy.

DimensionReasoningScore

Conciseness

The bulk of the body is lean, exact command blocks ("Run these commands exactly as below") with tight, purposeful prose — every harness gets its command with no conceptual padding Claude doesn't need. Minor inefficiencies keep it below a 5: the 'Update ACP and MCP SDKs everywhere' section re-inlines example commands already given verbatim, and '--config.minimumReleaseAge=4320' is hardcoded in 15 commands even though the text defers to 'pnpm-workspace.yaml', inviting drift.

4 / 5

Actionability

Fully executable, copy-paste-ready commands throughout: exact pnpm commands per harness, a concrete curl command to discover the latest fx release plus its test command, a generalizable pattern given as placeholder templates with worked examples, and a runnable verification script (./tools/verify-harness-adapter-deps.mjs). This matches the score-5 anchor; nothing is pseudocode or vague.

5 / 5

Workflow Clarity

The sections form a clear sequence (SDK updates → bridge updates → pinned fx version with test → example deps → global ACP/MCP sweep → manifest alignment) and end with an explicit feedback loop for this batch operation: "If this script shows errors, you must address them, then rerun the verification script until it passes." This is the validate → fix → retry pattern of the score-5 anchor; the batch-operation cap does not apply because validation is present.

5 / 5

Progressive Disclosure

No bundle files exist, so all content is inline; sections are clearly headed and easy to navigate, placing it above the score-3 anchor. It is not a 5: at 144 lines it exceeds the under-50-line simple-skill exception, the opening intro is too thin to serve as an overview, and '#### Example dependencies' nests oddly as a subsection under the fx CLI section rather than standing as a peer step.

4 / 5

Total

18

/

20

Passed

Description

73%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description answers both what and when in third person with a clearly distinct niche and natural trigger terms for the domain. Its main weakness is specificity: it summarizes the whole skill as one generic 'update dependencies' action instead of naming the several concrete operations it performs, and the when-clause mostly restates the what rather than broadening trigger coverage.

Suggestions

Enumerate the concrete actions the skill performs (e.g., update SDK dependencies, align bridge manifests, bump the pinned fx CLI version, run dependency verification) instead of the single generic 'update the primary SDK dependencies'.

Add natural trigger variations such as 'bump', 'upgrade', or 'keep harness SDKs up to date' so users' phrasings match the description more often.

Make the 'Use when' clause additive rather than repeating the what — e.g., "Use when asked to bump, upgrade, or keep harness SDKs and adapter dependencies current."

DimensionReasoningScore

Specificity

"Update the primary SDK dependencies of harness packages" names the domain and a single concrete action, but does not enumerate the several distinct operations the skill body actually covers (SDK bumps, bridge manifest alignment, pinned fx version, verification). It fits the 'names domain and 1-2 concrete actions' anchor, not the 'lists several specific actions' anchor above.

3 / 5

Completeness

Both parts are present: the what ("Update the primary SDK dependencies of harness packages") and an explicit when ("Use when asked to update the harness SDKs or harness adapter dependencies"). The when-clause largely echoes the what rather than adding new concrete trigger phrases, matching the score-4 anchor ('when could be more explicit or specific'); it is not score 3 because the trigger guidance is explicit, and not 5 because it adds no distinct trigger variations.

4 / 5

Trigger Term Quality

Terms like "update", "SDK", "harness", "adapter", and "dependencies" are natural phrasings a user in this domain would say, giving good keyword coverage. Common synonyms such as "bump", "upgrade", or "keep up to date" are missing, so it falls between the 3 and 5 anchors — noticeably above the midpoint.

4 / 5

Distinctiveness Conflict Risk

"harness packages", "harness SDKs", and "harness adapter dependencies" define a clear internal niche with distinct triggers that would rarely collide with other skills. This matches the score-5 anchor ('clear niche with distinct triggers; minimal conflict risk'); the neighboring anchor 4 would require actual overlap risk, which the distinctive 'harness' terminology avoids.

5 / 5

Total

16

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository

vercel/ai

Path

skills/update-harness-dependencies/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.