CtrlK
BlogDocsLog inGet started
Tessl Logo

webiny-admin-permissions

Admin-side permission UI registration and DI-backed permission checking. Use this skill when adding permission controls to the admin UI — schema-based auto-generated forms, injectable permissions via createPermissionsAbstraction/ createPermissionsFeature, typed hooks (createUsePermissions), the HasPermission component (createHasPermission), and the Security.Permissions component props. Covers both simple apps and complex multi-entity permission schemas.

68

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

77%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-structured skill body with executable code at every layer and comprehensive reference tables. The main weakness is progressive disclosure: substantial API/props reference material is inlined in SKILL.md with no bundle files to offload it, where a one-level-deep reference file would be appropriate.

Suggestions

Move the Schema Reference, Entity Definition, Actions, and Security.Permissions Props tables into a bundled reference file (e.g., references/api-reference.md) and link to it from a concise overview, improving progressive disclosure.

Trim prose that restates the adjacent code (e.g., 'Entity IDs are fully typed — canRead("bogus") produces a type error' duplicates what the typed hook already implies) to raise conciseness.

Add a short validation/confirmation step in the Extension Registration section (e.g., 'verify the permission accordion renders in the admin Permissions tab') to make the workflow sequence fully checkpointed.

DimensionReasoningScore

Conciseness

Mostly lean with executable code blocks and reference tables that earn their tokens; a few sentences restate what the code already shows (e.g., the 'Entity IDs are fully typed' line and the prose around entity dependencies could be trimmed).

4 / 5

Actionability

Fully executable, copy-paste-ready TypeScript/TSX for every layer (schema, abstraction, feature, registration, hooks, component, DI injection), plus complete prop/field reference tables; examples cover the common cases including the simple no-entities variant.

5 / 5

Workflow Clarity

The three-layer sequence (domain → features → presentation) is clearly delineated with the file structure reinforcing it; no explicit validation checkpoint is required because the operations are additive/declarative rather than destructive or batch, so the cap does not apply, though a brief 'verify permissions render in admin' confirmation step would push it to 5.

4 / 5

Progressive Disclosure

Content is well-organized into headed sections with a file-structure map, but no bundle files (references/, scripts/, assets/) exist and the API/prop reference tables are inlined entirely in SKILL.md rather than split into one-level-deep reference files; the body references only a sibling skill ('webiny-api-permissions'), not a bundled reference.

3 / 5

Total

16

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that names both the capability surface and concrete trigger conditions with named framework APIs. Third-person voice is used correctly throughout. Minor room for improvement only in broader trigger synonym coverage.

DimensionReasoningScore

Specificity

Lists multiple concrete actions: 'schema-based auto-generated forms, injectable permissions via createPermissionsAbstraction/createPermissionsFeature, typed hooks (createUsePermissions), the HasPermission component (createHasPermission), and the Security.Permissions component props' — comprehensive coverage of the admin permission workflow.

5 / 5

Completeness

Explicitly answers what ('Admin-side permission UI registration and DI-backed permission checking') and when ('Use this skill when adding permission controls to the admin UI — schema-based auto-generated forms...') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Includes natural phrases like 'adding permission controls to the admin UI' and 'permission controls', plus the concrete API names; a few common synonyms (e.g., 'RBAC', 'roles', 'access control') are missing but coverage is strong.

4 / 5

Distinctiveness Conflict Risk

Clear niche (admin-side permission UI + DI checking) with named APIs (createPermissionsAbstraction, Security.Permissions); minor overlap risk with the sibling webiny-api-permissions skill, which the body disambiguates.

4 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
webiny/webiny-js
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.