CtrlK
BlogDocsLog inGet started
Tessl Logo

webiny-configure-auth0

Configuring Auth0 as an identity provider (IDP) for Webiny projects. Use this skill when the developer asks about Auth0 authentication, Auth0 SSO, replacing Cognito with Auth0, setting up external identity providers, configuring OIDC authentication, mapping JWT claims to Webiny identities, or customizing the Auth0 login flow. Also relevant when asking about AUTH0_ISSUER, AUTH0_CLIENT_ID environment variables, Auth0IdpConfig, or the MyAuth0Extension pattern.

72

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is highly actionable with complete, executable examples and a clear step-by-step workflow. It is slightly verbose due to repeated scaffolding across examples and some explanatory padding, and it lacks explicit post-deploy validation checkpoints.

Suggestions

Consolidate the shared boilerplate across Examples 1-3 (imports, getIdentity skeleton, createImplementation wrapper) by showing the full example once and only diffing the relevant part in Examples 2 and 3 to reduce token cost.

Add an explicit validation step after deploy (e.g., verify a test login succeeds or check Lambda env vars are set) to turn the implicit checkpoint into a concrete one.

Consider moving the 'How <Auth0 /> Works Internally' details into a reference file and keeping only the behavioral contract inline, since Claude mainly needs to know what the component does, not its internal registration mechanics.

DimensionReasoningScore

Conciseness

Mostly efficient with well-organized tables and examples, but includes some over-explanation (e.g., the "How <Auth0 /> Works Internally" section and repeated identical code scaffolding across three examples) that could be tightened.

3 / 5

Actionability

Fully executable, copy-paste-ready TypeScript/TSX code across three examples covering basic config, custom claim verification, and DI dependencies, plus concrete install and deploy commands and env var definitions.

5 / 5

Workflow Clarity

Clear numbered sequence (Step 0 install through Step 5 deploy) with an explicit guard ("Do NOT run yarn automatically"), but the deploy step lacks explicit validation of the deployed configuration, so a checkpoint is implicit rather than verified.

4 / 5

Progressive Disclosure

Well-organized sections (TL;DR, Pattern, Reference Tables, Full Examples, Quick Reference, Related Skills) with no bundle files to reference; the reference tables are appropriately inline, though the three full code examples carry some repetition that could live in separate reference files.

4 / 5

Total

16

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is excellent: it concisely states the capability, provides an explicit and detailed 'Use when' trigger clause with natural phrasing, and includes specific technical identifiers that make it highly distinguishable. It uses third person and avoids fluff.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — configuring Auth0 as an IDP, replacing Cognito, mapping JWT claims to Webiny identities, customizing the Auth0 login flow — with comprehensive coverage of the integration scope.

5 / 5

Completeness

Explicitly answers both what ("Configuring Auth0 as an identity provider (IDP) for Webiny projects") and when ("Use this skill when the developer asks about Auth0 authentication...") with concrete trigger phrases.

5 / 5

Trigger Term Quality

Comprehensive natural terms users would say ("Auth0 authentication", "Auth0 SSO", "replacing Cognito with Auth0", "OIDC authentication") plus specific identifiers (AUTH0_ISSUER, AUTH0_CLIENT_ID, Auth0IdpConfig, MyAuth0Extension) and synonyms.

5 / 5

Distinctiveness Conflict Risk

Occupies a clear Auth0-for-Webiny niche with distinct triggers and named identifiers; minimal conflict risk with other IDP skills (Okta is referenced as a related but distinct skill).

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
webiny/webiny-js
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.