CtrlK
BlogDocsLog inGet started
Tessl Logo
PluginPublic

testland/tenant-onboarding-test-author

Use when a tenant onboarding or offboarding flow is added or changed, or before a compliance review: tests for account creation, isolation from the first API call, default quotas, billing links, seed data, idempotent re-provisioning and full deletion on teardown.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Overview
Quality
Evals
Security
Files

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers a well-sequenced five-step workflow with highly actionable artifacts: concrete test names, fixtures, framework guidance, a coverage matrix, and a worked example with a real assertion. Progressive disclosure is sound — all three referenced bundle files exist and are one level deep — with only minor duplication (repeated sibling-skill mentions and external citations echoed in both SKILL.md and the references).

Suggestions

Add an explicit error-recovery feedback loop: instruct what to do when a generated test fails or a coverage-matrix cell cannot be justified (fix the test or the code, re-run, re-check the matrix), which would raise workflow clarity to a 5.

Fix the Differentiation table's duplicate `cross-tenant-data-leak-tests` row (merge the 'steady-state runtime' and 'CI gate' descriptions) and consolidate the ~6 scattered mentions of the sibling skill to reduce token padding.

Deduplicate the external AWS/Microsoft citations — keep them in the reference files only and drop the five repeated URLs from SKILL.md's References section, leaving just the bundle-file links.

DimensionReasoningScore

Conciseness

Mostly efficient — the fixture table, test-name examples, anti-patterns table, and worked example all earn their tokens — but the Differentiation table lists `cross-tenant-data-leak-tests` twice and the sibling skill is referenced about six times throughout; this padding keeps it below the lean anchor 5, while the absence of concept-teaching keeps it above anchor 3.

4 / 5

Actionability

Fully concrete: the naming convention `test_<surface>_<scenario>_<expected>()` with seven copy-paste-ready names, a six-fixture table, a framework-per-stack table, and a worked example ending in a real assertion (`TenantQuota.objects.filter(tenant=new_tenant).count() == 1`) cover the common cases; not 4 because there are no pseudocode or missing key details.

5 / 5

Workflow Clarity

The five steps are clearly sequenced with dedicated sections and real checkpoints ("Run the suite as a non-privileged app role", "treat every empty cell as a gap to justify or schedule", cross-check the Anti-patterns table), but there is no explicit feedback loop for what to do when a generated test fails; that minor validation gap places it between anchors 4 and 5.

4 / 5

Progressive Disclosure

Three one-level-deep reference files, all verified to exist in ./references/, each clearly signaled with descriptive text at its point of use ("The full surface inventory table...", "The full per-surface scenario catalog..."); minor gaps — five external AWS/Microsoft URLs are duplicated in SKILL.md's References section though they also appear in the reference files, and the References section repeats the inline links — keep it below anchor 5.

4 / 5

Total

17

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description cleanly answers both what and when with a comprehensive, concrete list of the seven test areas covering the full provisioning lifecycle. Keyword coverage is strong but misses natural synonyms like 'provisioning' and 'deprovisioning', and the term 'isolation' creates minor conflict risk with the sibling runtime-isolation skill.

DimensionReasoningScore

Specificity

"tests for account creation, isolation from the first API call, default quotas, billing links, seed data, idempotent re-provisioning and full deletion on teardown" enumerates seven concrete test capabilities spanning the whole lifecycle, matching the comprehensive anchor; not 4 because coverage runs from creation through teardown with no evident gap.

5 / 5

Completeness

"Use when a tenant onboarding or offboarding flow is added or changed, or before a compliance review" explicitly answers 'when' with concrete triggers, and the test-area list explicitly answers 'what', matching the anchor-5 example structure; not 4 because neither half is vague or implicit.

5 / 5

Trigger Term Quality

Natural phrases like "tenant onboarding", "offboarding", "compliance review", "default quotas", and "billing" are present, but common variations users would say — "provisioning", "deprovisioning", "tenant lifecycle" — are absent; good coverage with a few natural terms missing fits anchor 4, not the synonym-complete anchor 5.

4 / 5

Distinctiveness Conflict Risk

The provisioning-lifecycle niche is distinct, but "isolation from the first API call" uses 'isolation' as a trigger that overlaps the sibling runtime-isolation skill (`cross-tenant-data-leak-tests`); minor overlap risk with a closely related skill fits anchor 4, not the minimal-conflict anchor 5.

4 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

On this page