fastapi-auth-patterns

I took a look at your fastapi-auth-patterns skill and wanted to share some thoughts.

Links:

• GitHub
• SkillzWave marketplace

The TL;DR

You're at 80/100 — solid B-grade territory. This is based on Anthropic's skill best practices. Your strongest area is Ease of Use (23/25) — the metadata and trigger terms are solid. The weakest is Progressive Disclosure Architecture (19/30) — the file structure needs work.

What's Working Well

• Trigger terms are specific — "Implement user authentication in FastAPI", "Configure OAuth2 flows", "Debug authentication errors" — these are exactly the kinds of activations Claude needs to recognize
• Good metadata overall — Skill name follows convention, description is actionable, not marketing fluff
• Practical examples — You've got JWT, OAuth2, and Supabase patterns covered, which addresses real developer pain points
• Clear authentication strategies section — The breakdown of when to use JWT vs OAuth2 vs Supabase shows you understand the trade-offs

The Big One: Missing Reference Files

Here's what's killing your PDA score: You reference scripts and templates that don't exist. The README talks about scripts/setup-jwt.sh, templates/jwt_auth.py, templates/oauth2_flow.py, but they're not actually in the repo. This is a major credibility issue because developers will try to use them and hit 404s.

Fix: Either create these files or inline the critical ones directly in SKILL.md. A 376-line SKILL.md isn't ideal, but it's better than broken references. If you go the inline route:

1. Move JWT implementation into a ## JWT Implementation section with full code
2. Add OAuth2 and Supabase implementations inline
3. Keep the templates directory reference but only if files actually exist

This alone could add +8 points to your PDA score.

Other Things Worth Fixing

1. No table of contents — Your file is 376 lines. Add a TOC at the top so developers can jump to what they need. Even just 5-6 major sections helps. (+1 point)

2. Validation workflow is weak — You reference validate-auth.sh but there's no strong run→check→fix feedback loop. Add actual validation output examples or error messages so developers know what success looks like. (+1 point)

3. Trigger phrase count is light — You've got the major ones, but could add 2-3 more specific scenarios like "Integrate JWT with FastAPI dependencies" or "Implement role-based access control". (+1 point)

4. Some sections are verbose — The "Authentication Strategies" section has extended explanations. Tighten these up to essential info only. Keep the density high. (+1 point)

Quick Wins

• Create the referenced script and template files (biggest impact)
• Add table of contents to SKILL.md
• Expand trigger phrases in the description
• Tighten up verbose sections

These fixes could realistically push you to 88-90 territory, moving you solidly into A-grade range.

Checkout your skill here: SkillzWave.ai | SpillWave We have an agentic skill installer that installs skills in 14+ coding agent platforms. Check out this guide on how to improve your agentic skills.