CtrlK
BlogDocsLog inGet started
Tessl Logo
PluginPublic

testland/renovate-config

Use when writing or reviewing renovate.json for Mend Renovate on GitHub, GitLab, Bitbucket, Azure DevOps or Gitea: preset extends, schedules, PR limits, vulnerability alerts, packageRules matching with automerge, ignored dependencies and labels.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Overview
Quality
Evals
Security
Files

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable reference skill: complete copy-paste configs, a coherent step sequence, and useful anti-patterns/limitations sections. Its main weaknesses are the absence of an explicit config-validation step in the workflow and the lack of any progressive disclosure — the full config reference is inlined in SKILL.md rather than split into a references/ file.

Suggestions

Move the bulk reference material (top-level keys table, preset catalog, packageRules matching criteria) into a references/ file (e.g., references/config-options.md), keeping SKILL.md as an overview with clearly signaled one-level-deep pointers.

Add an explicit validation step to the workflow, e.g., 'After authoring, validate with `renovate-config-validator` (or the validate CI job) before merging' as a final step with a fix-and-revalidate loop.

Trim minor padding: drop the repeated 'Per [rn-cfg][rn-cfg]' section leads and convert the doc-quoted descriptions in the Step 1 table to plain phrasing.

DimensionReasoningScore

Conciseness

The body is dense and reference-like — tables and complete JSON blocks with almost no concept explanations Claude already knows — but has minor trimmable padding: the repeated "Per [rn-cfg][rn-cfg]" section leads and doc-quoted phrasing in the top-level keys table. Fits 'efficient; minor instances of over-explanation that could be trimmed' (4) rather than the lean-every-token-earns-its-place level (5).

4 / 5

Actionability

Fully executable, copy-paste-ready guidance: a complete canonical config (Step 2), preset extends block, four concrete packageRules patterns, a vulnerabilityAlerts block, schedule examples, and a GitLab CI yaml for self-hosting. Specific examples cover the common cases, matching the top anchor.

5 / 5

Workflow Clarity

A clear 8-step authoring/review sequence (keys → canonical example → presets → packageRules → alerts → schedules → suppression → deployment) with the Anti-patterns table and mandatory justification/re-review cadence acting as checkpoints. It falls short of 5 because no explicit validation step exists (e.g., running Renovate's config validator before merging); it stays above 3 because checkpoints like anti-patterns and the re-review audit are present.

4 / 5

Progressive Disclosure

No bundle files exist and the ~250-line body inlines what is effectively a config reference — the top-level key table, preset catalog, and packageRules matching criteria — that belongs in a references/ file with SKILL.md as overview. Section structure is good (so above the 2 anchor's structureless inline dump), but content that should be separate is inline, fitting the 3 anchor rather than 4.

3 / 5

Total

16

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person, concise, with an explicit 'Use when' trigger clause naming the artifact, platforms, and a comprehensive list of concrete config capabilities. Trigger coverage is good but would be even stronger with common synonyms like 'dependency updates' or 'automerge'.

DimensionReasoningScore

Specificity

Names the concrete artifact (renovate.json) and enumerates specific capabilities: "preset extends, schedules, PR limits, vulnerability alerts, packageRules matching with automerge, ignored dependencies and labels" — comprehensive coverage of the config surface with no real gaps, matching the top anchor rather than the 'minor gaps' level below it.

5 / 5

Completeness

Explicitly answers both questions: the "Use when writing or reviewing renovate.json ... on GitHub, GitLab, Bitbucket, Azure DevOps or Gitea" clause gives concrete when-triggers, and the colon-separated list states what the skill covers. Both are explicit and concrete, matching the 5 anchor rather than the 4 anchor where the 'when' could be more specific.

5 / 5

Trigger Term Quality

Natural phrases like "writing or reviewing renovate.json", "Mend Renovate", and platform names match what users would say, but common variations such as "dependency updates", "automerge PRs", or "renovate bot" are missing. Good coverage with a few natural terms absent fits the 4 anchor, not the comprehensive-synonyms level of 5.

4 / 5

Distinctiveness Conflict Risk

"renovate.json for Mend Renovate" is a clear niche with distinct triggers; the platform enumeration further scopes it. Only marginal conceptual overlap with a dependabot skill, and no dependabot triggers appear, so conflict risk is minimal — the 5 anchor rather than the 4 anchor's 'minor overlap risk'.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

On this page