CtrlK
BlogDocsLog inGet started
Tessl Logo

webiny-configure-auth0

Configuring Auth0 as an identity provider (IDP) for Webiny projects. Use this skill when the developer asks about Auth0 authentication, Auth0 SSO, replacing Cognito with Auth0, setting up external identity providers, configuring OIDC authentication, mapping JWT claims to Webiny identities, or customizing the Auth0 login flow. Also relevant when asking about AUTH0_ISSUER, AUTH0_CLIENT_ID environment variables, Auth0IdpConfig, or the MyAuth0Extension pattern.

68

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

65%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Highly actionable with complete, executable code and a clear step sequence, but it loses points for duplicated content across examples and a missing post-deploy verification checkpoint. Organization is decent but would benefit from progressive disclosure given the file length.

Suggestions

Add an explicit post-deploy verification step (e.g. confirm the Admin login screen renders Auth0 and a token validates) to close the workflow feedback loop and lift workflow_clarity.

De-duplicate the code: Example 2 repeats Example 1's getIdentity body verbatim — show only the diff (verifyTokenClaims) and reference Example 1 for the base, and trim the Quick Reference to material not already in the Full Examples.

Move the reference tables and/or the advanced DI example into separate reference files with one-level-deep links from SKILL.md to reduce inline length and improve progressive_disclosure.

DimensionReasoningScore

Conciseness

The body is mostly efficient and avoids explaining well-known concepts, but the full code from Example 1 recurs almost verbatim in Example 2 and the Quick Reference repeats the imports, file structure, and deploy command, so it could be tightened.

2 / 3

Actionability

Provides copy-paste-ready TypeScript/TSX with exact commands (e.g. 'yarn add @webiny/auth0@^0.0.0-unstable.xxx', 'yarn webiny deploy'), concrete env vars, and absolute file paths across five sequenced steps.

3 / 3

Workflow Clarity

Steps 0-5 are clearly sequenced and include a guard against auto-running yarn, but there is no explicit validation/verification checkpoint after the destructive deploy step, which caps workflow clarity per the rubric.

2 / 3

Progressive Disclosure

Sections are well-organized, but no bundle files exist and the skill is a single ~300-line file with full worked examples and a redundant Quick Reference inline; for a file this size, content could be split out rather than kept monolithic.

2 / 3

Total

9

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that clearly states its purpose and provides an explicit, well-populated trigger list grounded in concrete identifiers. It is concise, distinctive, and free of vague fluff.

DimensionReasoningScore

Specificity

Lists multiple concrete actions such as 'replacing Cognito with Auth0', 'configuring OIDC authentication', 'mapping JWT claims to Webiny identities', and 'customizing the Auth0 login flow', matching the multi-action anchor rather than the partial score-2 anchor.

3 / 3

Completeness

Explicitly states what the skill does ('Configuring Auth0 as an identity provider (IDP) for Webiny projects') and includes an explicit 'Use this skill when the developer asks about...' trigger clause, satisfying both what and when.

3 / 3

Trigger Term Quality

Covers natural user phrasing ('Auth0 authentication', 'Auth0 SSO', 'OIDC authentication', 'JWT claims', 'Auth0 login flow') alongside specific identifiers like AUTH0_ISSUER and Auth0IdpConfig, giving good natural-term coverage.

3 / 3

Distinctiveness Conflict Risk

The narrow Auth0-for-Webiny niche and distinctive identifiers (AUTH0_ISSUER, AUTH0_CLIENT_ID, Auth0IdpConfig, MyAuth0Extension) make it unlikely to trigger for the wrong skill.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
webiny/webiny-js
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.