CtrlK
BlogDocsLog inGet started
Tessl Logo

tpscloud/flared

Agent skills for Cloudflare, starting with Artifacts: Git repos for agents through the Workers binding, the REST API, and plain git, with type-checked TypeScript and tested Go examples.

100

1.00x
Quality

100%

Does it follow best practices?

Impact

100%

1.00x

Average score across 4 eval scenarios

SecuritybySnyk

Low

Low-risk findings worth noting

Overview
Quality
Evals
Security
Files

Quality

Content

100%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a dense, exemplar skill body: it front-loads irreversible-mistake prevention (jurisdiction, token hygiene, untrusted repo text), gives fully executable code for the core flow with verification, and cleanly splits detail into well-signaled one-level-deep references. No padding, no nested references, and destructive-adjacent operations (token revocation, fork deletion) are paired with validation and cleanup.

DimensionReasoningScore

Conciseness

Every section carries non-obvious, beta-specific facts Claude cannot already know (immutable jurisdiction, 'art_v2_<letter>_<40 hex>' token format vs the stale 'art_v1' docs, protocol v1 receive-pack only, CREATE_IN_PROGRESS retry codes) with zero padding about Git or Cloudflare basics. The ~170-line body earns each token, and time-sensitive beta caveats are pointed at the changelog rather than restated.

5 / 5

Actionability

The 'Minimal flow' section is copy-paste-ready: complete TypeScript for fork/wait/revoke/mint with cleanup and a backoff helper, plus executable shell that clones, pushes, and verifies via 'ls-remote' compared to 'rev-parse HEAD'. Token passing is shown concretely for both 'git -c http.extraHeader' and the 'GIT_CONFIG_COUNT' env alternative, with the 'ps' visibility caveat.

5 / 5

Workflow Clarity

The sequence (get baseline -> fork -> wait for ready -> revoke initial token -> mint scoped token -> clone/commit/push) includes explicit validation (the ls-remote test confirming the remote branch moved) and error-recovery loops ('getWhenReady' backoff on *_IN_PROGRESS codes, orphan-fork deletion in the catch). This matches the anchor with explicit validation steps and feedback loops, so the missing-validation cap does not apply.

5 / 5

Progressive Disclosure

The body keeps only overview, decision rules, and a minimal flow, while six topic-specific reference files (workers-binding, rest-api, git-and-tokens, events, patterns, limits-pricing-errors) each get a one-line scope description plus 'Read only the file the task needs.' All six referenced paths exist in the bundle, are one level deep, and cross-link only to siblings, so navigation is easy.

5 / 5

Total

20

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a strong exemplar: third-person, specific about all three interfaces, with an explicit 'Use when' trigger list and explicit negative scope. Trigger terms are the natural phrases and URL pattern a user working with this beta product would actually say.

DimensionReasoningScore

Specificity

It lists multiple concrete actions — 'creating, forking or importing Artifacts repos', 'minting or revoking repo tokens', 'cloning or pushing to *.artifacts.cloudflare.net remotes', 'choosing namespaces and jurisdictions', 'consuming Artifacts events from Queues or Workflows' — across all three interfaces, which matches the comprehensive-coverage anchor. It is not score 4 because there is no noticeable coverage gap in the actions named.

5 / 5

Completeness

It answers 'what' concretely ('Build on Cloudflare Artifacts (beta)... through the Workers binding, the REST API and plain git over HTTPS') and 'when' with an explicit 'Use when' clause enumerating concrete triggers. The missing-'Use when' cap at 3 does not apply, and the 'when' is not merely implicit, ruling out score 4.

5 / 5

Trigger Term Quality

Natural user phrasing (clone, push, fork, repo token, remote, limits and pricing) is comprehensive, and '*.artifacts.cloudflare.net remotes' serves the distinctive file-extension role. It is not score 4 because the common variations users would actually say are present rather than a few missing.

5 / 5

Distinctiveness Conflict Risk

The product name plus the '*.artifacts.cloudflare.net' URL pattern give it a clear niche, and it explicitly disambiguates the two nearest conflicts ('Not for R2 object storage or for Workers Builds connected to an external Git host'). Conflict risk is minimal, matching the top anchor rather than the 'minor overlap' anchor at 4.

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

Table of Contents