CtrlK
BlogDocsLog inGet started
Tessl Logo
PluginPublic

testland/okta-tests

Use when an app uses Okta as its identity provider and needs tests for org config, sign-in policies or Identity Engine flows: per-PR or shared orgs, MFA enforcement, factor enrollment, recovery, SCIM provisioning and least-privilege API tokens.

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Overview
Quality
Evals
Security
Files

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, largely executable guide: concrete code for most steps, a clear 8-step sequence, honest anti-patterns and limitations. The main gaps are the missing cleanup/teardown and recovery checkpoints for shared-org test runs, and two steps (OIE enrollment, scoped tokens) that stop at high-level sketches instead of runnable code.

Suggestions

Add an explicit cleanup/teardown step to the workflow (e.g., a pytest fixture that deletes 'pr-*' namespaced users/groups after each run) with a verify-clean assertion, since the skill itself declares cleanup hooks mandatory for shared orgs.

Replace the Step 7 pseudocode ('get_admin_token(...) ...') with a complete client-credentials token request like the Step 3 example, and add a concrete Step 5 code sample for OIE factor enrollment via the Auth JS SDK mock mode or the REST API.

Trim lines that restate common knowledge (e.g., what sign-in policies enforce) and move the full SCIM user payload into a short reference note so the main workflow stays lean.

DimensionReasoningScore

Conciseness

The body is dominated by lean steps, tables, and code, but a few lines re-explain knowledge Claude already has ('Sign-in policies in Okta enforce per-app MFA, IP restrictions, and device trust'). Matches 'efficient; minor instances of over-explanation that could be trimmed' rather than the fully lean 5 anchor.

4 / 5

Actionability

Mostly executable: copy-paste-ready Python tests for the token endpoint, sign-in policy, and SCIM, plus terraform and CI commands. Not 5: Step 5 offers no code ('drive the flow via Playwright... or via the OIE REST API directly') and Step 7's scoped-token example is a sketch with an undefined helper and a literal '...'.

4 / 5

Workflow Clarity

Steps 1-8 are clearly sequenced and include the terraform drift check as a checkpoint, but the workflow creates fixtures in shared orgs where the skill itself states 'cleanup hooks are mandatory' (Limitations) without giving a cleanup/teardown step or error-recovery loop in the sequence. Per the rubric cap for batch/shared-state operations lacking validation, this is 'sequence present but checkpoints missing or implicit' — not 4.

3 / 5

Progressive Disclosure

No bundle files exist; the single SKILL.md is well-sectioned with one-level-deep navigation (numbered steps, anti-patterns, limitations, references) and nothing nested. Not 5: bulky inline material (the full SCIM payload, OIE enrollment-flow detail) could live in reference files, which is a minor organization gap.

4 / 5

Total

15

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it opens with an explicit 'Use when' trigger, names the concrete test domains it covers, and stays within a distinctive Okta niche. The only weaknesses are a few missing natural synonyms (SSO, single sign-on, OIE) and no explicit differentiation from sibling IdP testing skills.

DimensionReasoningScore

Specificity

Lists multiple concrete capabilities — 'tests for org config, sign-in policies or Identity Engine flows', 'MFA enforcement, factor enrollment, recovery, SCIM provisioning and least-privilege API tokens' — with comprehensive coverage of the Okta testing domain. Not 4: no meaningful gaps in the action list.

5 / 5

Completeness

Explicitly answers both: what ('needs tests for org config, sign-in policies or Identity Engine flows: ... MFA enforcement, factor enrollment, recovery, SCIM provisioning and least-privilege API tokens') and when ('Use when an app uses Okta as its identity provider'). Not 4: the 'when' clause is explicit and specific rather than weakly implied.

5 / 5

Trigger Term Quality

Natural terms users would say are present ('Okta', 'identity provider', 'sign-in policies', 'MFA', 'SCIM provisioning'), but common synonyms like 'SSO', 'single sign-on', 'OIE', or 'super-admin token' are missing. Not 5: keyword coverage is good rather than comprehensive.

4 / 5

Distinctiveness Conflict Risk

Okta is a clear niche with distinct triggers ('app uses Okta as its identity provider'), minimizing conflict risk; minor overlap remains with sibling IdP skills (auth0-tests, keycloak-tests) for generic 'identity provider' phrasing. Not 5: the description does not itself disambiguate from those closely related skills.

4 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

On this page