CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

axiom-audit-database-schema

Use when the user mentions database schema review, migration safety, GRDB migration audit, or SQLite schema checking.

Quality

70%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./axiom-codex/skills/axiom-audit-database-schema/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

77%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a strongly actionable, well-sequenced audit workflow with concrete greps, verification steps, fixes, and a structured output format — top marks for actionability and workflow clarity. Its weaknesses are token efficiency (coaching and example sections add padding) and monolithic structure (the 10-pattern catalog would be better split into reference files).

Suggestions

Trim the 'Invocation Examples' section (five near-identical examples) and the 'Scope' section, which restates the description, to reclaim tokens without losing audit capability.

Move the 10-pattern detection catalog (Phase 2) into a references/ file (e.g. references/patterns.md) and keep a one-line summary table in SKILL.md, so the overview loads lean and detail is one level deep.

Fold the 'Tool Use Is Mandatory' section's guidance into a single line at the top instead of a dedicated section with repeated instructions.

DimensionReasoningScore

Conciseness

The pattern catalog is dense and operational (Issue/Search/Verify/Fix per pattern), but sections like 'Invocation Examples' (five near-identical examples), 'Scope' (restates the description), and 'Tool Use Is Mandatory' (coaching model behavior) are padding that could be trimmed. Not score 4 because several sections add tokens without adding audit capability; not score 2 since the bulk is genuinely operational.

3 / 5

Actionability

Every pattern ships a runnable grep regex, a Read-verification step, and copy-paste fixes (e.g. 'try db.write { db in for item in items { try item.insert(db) } }' and the 'db.columns(in:)' existence guard), plus a complete output template and a false-positive list. This is fully executable guidance covering the common cases.

5 / 5

Workflow Clarity

Five clearly sequenced phases (map → detect → completeness → cross-reference → score) with explicit validation checkpoints: 'use Read to verify the surrounding context before reporting', the Schema Map gate before Phase 2, false-positive checks, and output limits. As a read-only audit there are no destructive operations, so the batch/destruction cap does not apply.

5 / 5

Progressive Disclosure

No bundle files exist (references/, scripts/, assets/ are absent), and the ~290-line body inlines the entire 10-pattern catalog — exactly the bulk detail a references file would hold. Headers are clear, giving structure, but content that should be separate is inline and the 'Related' links point at another skill's files rather than a local bundle. Not score 4 because the bulk detail is not split out.

3 / 5

Total

16

/

20

Passed

Description

47%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has a clear, explicit trigger clause with good natural keywords for a well-defined niche, but it never states what the skill actually does — no actions or capabilities are mentioned. Adding a leading 'what' clause naming the concrete audit actions would lift both completeness and specificity.

Suggestions

Add a 'what' clause before the trigger clause stating concrete actions, e.g. 'Audits SQLite/GRDB database schemas and migrations for data-loss risks, unsafe ALTER TABLE patterns, and foreign-key misuse. Use when...'

Broaden trigger coverage with natural synonyms users would say, such as plain 'migrations', 'schema', 'table changes', 'ALTER TABLE', or 'data loss' alongside the existing phrases.

State the output the user gets (e.g. severity-ranked findings with fixes) so the value of invoking the skill is explicit.

DimensionReasoningScore

Specificity

The description names the domain with concrete technologies ('GRDB migration audit', 'SQLite schema checking') but states no actions at all — there is no verb describing what the skill does. It is not score 1 because the language is specific rather than 'pure abstract', and not score 3 because that requires 1-2 concrete actions, which are entirely absent.

2 / 5

Completeness

Only 'when' is present ('Use when the user mentions...') with no 'what' — the exact anchor-2 case. Score 3 would require a clear 'what', which the description never provides.

2 / 5

Trigger Term Quality

Phrases like 'database schema review', 'migration safety', and 'SQLite schema checking' are natural user phrasings. Not score 5 because common variations and synonyms (plain 'migrations', 'schema', 'ALTER TABLE', 'data loss') are missing; clearly above score 3's 'some relevant keywords'.

4 / 5

Distinctiveness Conflict Risk

GRDB/SQLite schema auditing is a distinct niche with clear triggers and only minor overlap risk with general code-review or migration tooling skills. Not score 5 because 'migration safety' is broad enough to overlap with non-SQLite migration skills.

4 / 5

Total

12

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

CharlesWiltgen/Axiom

Path

axiom-codex/skills/axiom-audit-database-schema/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.