Borderless RecruitBook A Call
Employer reviewing a Make.com expert skills test and workflow diagram

Make.com Expert Skills Test: How to Assess Candidates Before Hiring

By 5 November 2026

A useful Make.com expert skills test asks candidates to build and explain a realistic workflow. For UK and European employers, the aim is to establish whether someone can maintain the automations your team depends on. Assess data validation, API calls, CRM updates, duplicate prevention and recovery alongside the successful route. Use synthetic data, pay candidates for substantial practical work and follow the build with a live walkthrough.

What the assessment needs to prove

An expert should understand the business process before selecting modules. Ask them to explain scenarios, routers, filters, iterators, aggregators, webhooks, data stores and HTTP requests through their design choices. Production competence also means anticipating replayed events, unavailable applications and unsafe credential handling. A portfolio or credential is supporting evidence; neither establishes what the candidate personally designed or maintained.

Competencies to test

CompetencyEvidence to requestWeak evidence
Process analysisExplicit business rules, boundaries and assumptionsBuilding before clarifying record ownership
Make architectureReadable routes and purposeful data transformationsUnexplained modules or duplicated logic
Integration engineeringAuthentication, response validation and pagination where relevantA successful API call without failure handling
Operation and handoverAlerts, safe recovery and an operator runbookA scenario only its builder can support

How Borderless Recruit helps: Borderless Recruit sources dedicated, full-time Philippine AI automation specialists who work only for your company during your UK or European business hours. The AI Automation Specialist service starts from £990 / €1,150 per month ($1,300), with sourcing, vetting, local employment contracts, payroll and HR covered by a flat monthly fee. Vetting includes a live English interview, a personality and reliability assessment, and a practical workflow build with error handling; you interview the finalists.

Copyable practical Make.com test brief

Use this fictional sales process as an assessment illustration. An inbound webhook supplies an event key, company identifier, contact email, marketing-permission field, deal value, currency and product list. Validate the payload, enrich the company through a supplied mock API, create or update the correct CRM records and notify the assigned owner. Keep personal data out of routine notifications.

Give every candidate the same sandbox, mock API documentation, sample payloads and acceptance criteria. Agree the paid scope and submission deadline beforehand. Provide a CRM sandbox or mock endpoint so unfamiliarity with your particular CRM does not dominate the result. Ask candidates to document assumptions and incomplete work rather than conceal limitations.

  • Define the event key, company identifier and contact email as mandatory. Use the company identifier to match companies and the email to match contacts; a replayed event must not create another deal.
  • Require numeric deal values and a recognised currency from the supplied allowlist. Decide in the brief whether an empty product list is valid.
  • For this exercise, store the marketing-permission field without starting a campaign. Do not ask candidates to infer permission from enrichment data.
  • Require a webhook, meaningful routing, array handling, an HTTP request and persistent duplicate tracking. Let candidates justify their module choices.
  • Request a sanitised blueprint, test evidence and a README covering setup, monitoring, recovery and limitations. Disclose templates, documentation and AI assistance used.
Make.com assessment workflow showing webhook validation, duplicate checks, company enrichment, CRM updates and recovery routes

Sample inputs and edge cases

Supply valid new and existing-company records alongside malformed JSON, missing fields, an empty product array and an enrichment response with missing data. Include temporary API failures and an expired credential. For failures rejected before the scenario runs, accept evidence of the webhook response and an explanation of the boundary. Do not require an internal error route for a request that never reaches it.

Acceptance tests for the fictional workflow

Test input or faultExpected behaviourEvidence to inspect
Valid company and contactMatch or create the intended records and notify the ownerField mappings and resulting CRM state
Repeated event keyAvoid repeating completed CRM changes and notificationsPersistent status and replay trace
Overlapping deliveries of the same eventPrevent competing runs from creating duplicatesDemonstrated concurrency control and its limits
Missing mandatory fieldReject or quarantine before CRM changesUseful diagnostic without unnecessary personal data
Rate limit or unavailable enrichment APIDefer or retry within a defined policyBounded attempts, alert and recovery instructions
CRM write succeeds but notification failsRecover without creating another dealSeparate progress tracking for each external action
Timeout after a CRM write requestCheck whether the write happened before retryingReconciliation using a stable external reference

A transparent scoring rubric

Use the following as an editorial assessment framework, adapting expectations to the vacancy. Rate each category as insufficient, acceptable, strong or exceptional. Share the criteria before the test and record observable evidence for each rating. Do not award credit merely for naming a technique: ask the candidate to demonstrate it or explain the limitation.

Make.com candidate scorecard

CategoryStrong performanceSerious concern
Business logicExplicit rules that match the briefSilent assumptions change the requested behaviour
ArchitectureReadable routes and justified module choicesComplexity the candidate cannot explain
Data handlingChecks types, missing values and arrays before writesOptimistic mappings corrupt CRM records
API competenceExplains authentication, responses and applicable limitsTreats every response as success
ReliabilityDemonstrates duplicate prevention and partial-failure recoveryBlind retries or lost failed events
SecurityScoped test credentials and sanitised exportsExposed secrets or live customer data
MaintainabilityClear naming, alert ownership and recovery instructionsNo usable handover
ExplanationDefends decisions and adapts the designCannot explain copied logic

Make business correctness, reliability and security pass conditions. An unresolved failure in any of these means the candidate has not passed for independent ownership, regardless of strengths elsewhere. A credible explanation without a working demonstration identifies a follow-up assessment, not a proven capability. Record whether any correction was independent or required substantial prompting.

A candidate who builds the successful route but needs help with recovery may suit a supported junior role. Independent ownership requires demonstrated failure handling and a usable handover. Reserve expert-level expectations for candidates who also challenge weak requirements and explain architectural trade-offs. Judge against the advertised responsibilities rather than the number of modules built.

What a strong model approach looks like

There is no mandatory blueprint. Look for a design that separates validation, external actions and recovery, with enough recorded state to explain what happened. Idempotency means handling a replay without repeating the intended external effect. Event deduplication and matching existing CRM records solve different problems; ask candidates to explain both.

  • Validate before enrichment or CRM writes. Define what acknowledgement means: receipt of the event or completion of the business process.
  • Track processing and completion using stable identifiers. A lookup followed by a separate write is not, by itself, evidence that overlapping runs are safe.
  • Ask how concurrency is controlled, which other processes can write the same records and where the proposed protection stops.
  • Record partial progress so a failed notification does not trigger another deal creation. Reconcile ambiguous write outcomes before attempting recovery.
  • Distinguish temporary failures from invalid data or credentials requiring intervention. Define retry limits, escalation and the person responsible for replay.
  • Explain the trade-off between a large scenario and smaller coordinated scenarios, including visibility, dependencies and maintenance effort.

Add an AI automation track only when needed

For a role connecting language models or agents, extend the exercise with optional classification or summarisation. Require structured output, validation against an allowed schema and human review before consequential external actions. Test unsupported claims, missing context, contradictory fields and instructions embedded in incoming data. A model's own confidence statement should not serve as the sole approval check.

Ask the candidate to explain what happens when the model times out or returns an unusable response. Keep deterministic business rules outside the model where ordinary logic is sufficient. Request a plan for monitoring platform consumption and any separately billed model or API usage. The Make.com and OpenAI integration hiring guide explores this specialism further.

Security and data-protection checks

Use synthetic data during recruitment. Before production access, identify the organisations involved, their responsibilities and the personal data available to the specialist. Apply least-privilege access and separate test credentials from live connections. Include webhook payloads, run history, notifications and exports in the access and retention review.

Remote access by a separate organisation outside the UK can constitute a restricted transfer; the legal relationship matters, not just the worker's location. Assess the arrangement using the ICO's international-transfer guidance. EU employers should assess relevant transfer requirements using the European Commission's international data-protection guidance. A successful technical test does not establish GDPR compliance.

  • Ask who can manage connections, rotate credentials and revoke access.
  • Inspect exports and mapped values for embedded tokens, webhook secrets or personal data before sharing.
  • Require an inventory of connected applications, data exchanged and credential owners.
  • Check alert permissions and retention settings as well as the visible scenario design.
Employer scorecard comparing Make.com candidates on business logic, reliability, security, API competence and handover

Verify authorship through a live walkthrough

Allow disclosed templates and AI assistance, then check whether the candidate owns the reasoning. Ask them to trace a payload through the routes, explain a mapping expression and predict what changes when a requirement changes. For example, change the fictional owner-routing rule and ask which filters, test cases and documentation need updating.

  • What happens if the sender retries while the original execution is still running?
  • Which failures are safe to retry, and which require checking the destination first?
  • What alert would the operator receive, and what should they do next?
  • What did a template or AI assistant contribute, and how did you verify it?
  • Which part would you redesign if event volume increased or application limits changed?

Use the same core questions for each candidate and record explanations before discussing ratings with other reviewers. Evaluate clarity, judgement and the ability to work with your team. Assess written and spoken English through the README and discussion, without treating accent as a proxy for competence.

Connect the assessment to the actual role

For a Make developer, emphasise integrations, transformations, debugging and handover. For an automation architect, add process boundaries, governance and platform selection. For an AI automation specialist, include evaluation cases and human approval controls alongside conventional integration skills. Remove optional tasks that do not reflect the work you need done.

Ask when the candidate would choose native CRM automation, custom code, n8n, Zapier or an RPA tool instead. A useful answer discusses maintainability, hosting, data sensitivity and team capability. Employers weighing mainstream platforms can consult the Make.com versus Zapier hiring comparison.

For a Philippine specialist, agree a shifted schedule covering your UK or European business hours. The Philippines does not observe daylight saving, so document how the shift will change when your local clocks change. Confirm meeting availability, incident escalation and handover expectations. The broader Make.com hiring guide covers engagement options.

Turn the successful test into an operating model

  • Assign business and technical owners for each production workflow.
  • Keep an inventory of scenarios, connections, dependencies and alert destinations.
  • Agree release, rollback and disable procedures before granting production access.
  • Define who investigates failures, approves replays and receives escalations.
  • Keep documentation, exports and credentials under company control.
  • During probation, assess safe delivery, communication and maintenance behaviour against the responsibilities established in the test.

Frequently Asked Questions

How long should a Make.com skills test take?

Agree a paid time box suited to the vacancy and tell candidates which parts are essential. Reduce the build scope when necessary and discuss optional architecture questions in the walkthrough. Do not expect a production system as unpaid recruitment work.

How should Make certification affect the hiring decision?

Verify any claimed credential with its issuer and treat it as supporting evidence. It should not override weak performance on the practical test or an inability to explain the submitted design.

What if the employer cannot judge the technical submission?

Have an experienced automation reviewer assess the blueprint, observe the tests and question the recovery design. The hiring manager should still verify business rules, communication and handover quality. A polished demonstration alone is insufficient evidence for independent production access.

Sources

  1. ICO's international-transfer guidance — ico.org.uk
  2. European Commission's international data-protection guidance — commission.europa.eu