CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

code-review

Comprehensive code review covering security, correctness, bash compatibility, test coverage, and code quality. Use for PRs, commits, or any code changes.

64

Quality

80%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./.claude/skills/code-review/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

77%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong, highly actionable review playbook with an exemplary workflow (explicit checkpoints, feedback loops, severity rubric, and copy-paste gh commands). Its main weaknesses are a monolithic structure that inlines PR-submission mechanics and pentest vectors instead of splitting them into reference files, and repeated badge-image boilerplate that inflates token cost.

Suggestions

Split the PR Review Submission section (gh api reaction/review commands and payload rules) and the Pentest Checklist into references/ files (e.g. references/pr-submission.md, references/pentest-vectors.md), keeping SKILL.md as a lean overview with one-level-deep, clearly signaled links.

Define each priority badge markdown string once (e.g. in a short table or a single reference) and refer to it by priority level elsewhere, instead of repeating the full shields.io URL six times.

Provide concrete substitutions or shell-variable capture for the {owner}/{repo} and <head commit SHA> placeholders in the gh api commands (e.g. derive them from gh pr view --json url,headRefOid) so the submission flow is fully copy-paste ready.

DimensionReasoningScore

Conciseness

The body is dense, expert-level guidance with no padding or explanation of concepts Claude already knows, but the full shields.io badge markdown is repeated verbatim about six times across the severity table, example, and output template, and the security-warning block could be tightened. Efficient with minor trimmable repetition — anchor 4, not 5.

4 / 5

Actionability

Concrete executable commands throughout (gh pr diff, docker run debian:bookworm-slim bash -c, full gh api JSON payloads with --jq filters), exact paths to search, and decision-rule tables. Falls short of anchor 5 only because literal {owner}/{repo} and <head commit SHA> placeholders require manual substitution before the commands run.

4 / 5

Workflow Clarity

A clearly sequenced workflow (scope -> read -> review dimensions -> findings -> output -> PR submission) with explicit validation checkpoints ("If no changes are found, inform the user and stop"; "verify they pass against bash") and feedback loops (retry on invalid line position; self-review forces COMMENT). This matches anchor 5's explicit validation steps, error-recovery loops, and checklists.

5 / 5

Progressive Disclosure

Internally well-sectioned and navigable, but it is a monolithic ~350-line SKILL.md with no bundle files: the PR-submission API mechanics and the pentest checklist are inline detail that belongs in one-level-deep reference files. This fits anchor 3 (content that should be separate is inline) better than anchor 4's "minor organization gaps".

3 / 5

Total

16

/

20

Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A solid description that clearly states both what the skill does (code review across five named dimensions) and when to use it (PRs, commits, any code changes), with mostly natural trigger terms. Its weaknesses are minor: a generic "Comprehensive" opener, slightly broad trigger phrasing, and missing synonyms like "diff" or "pull request".

DimensionReasoningScore

Specificity

Enumerates five concrete review areas ("security, correctness, bash compatibility, test coverage, and code quality"), which is several specific items, though the "Comprehensive code review" frame is generic and it omits other covered areas (platform compatibility, PR submission).

4 / 5

Completeness

Both a clear "what" (review across five named dimensions) and an explicit "when" clause are present. Not a 5 because "any code changes" is broad where the top anchor expects more concrete trigger phrases; clearly above a 3, where "when" is missing or only implied.

4 / 5

Trigger Term Quality

"Use for PRs, commits, or any code changes" supplies natural trigger terms users would say, but misses common variations such as "diff" and "pull request" spelled out. Fits anchor 4 (good coverage, a few natural terms missing) rather than 5's comprehensive synonym coverage.

4 / 5

Distinctiveness Conflict Risk

The bash-compatibility/sandbox framing carves a distinct niche among review skills, but "any code changes" is broad enough to overlap with other generic code-review skills, matching anchor 4 rather than 5's minimal-conflict clear niche.

4 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

DataDog/rshell

Path

.claude/skills/code-review/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.