Content
75%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
The body is a dense, well-structured, highly actionable audit playbook: every category pairs copy-paste scan commands with explicit scoring anchors, and the report format and weighted formula leave nothing ambiguous. Its main weaknesses are technical defects in several commands (brace-glob includes, missing -P flag, a shell precedence bug) and small redundancies, which keep it just below top marks.
Suggestions
Fix the non-functional grep include patterns: replace --include="*.{js,ts,py,...}" with repeated --include flags (e.g. --include='*.js' --include='*.ts'), since glob patterns do not expand braces and these scans currently match no files.
Use grep -P (or a portable [Aa][Pp][Ii]-style pattern) for the '(?i)' case-insensitive group in the Secrets scan, and parenthesize the shell precedence bug on the pyflakes line: [ -f pyproject.toml ] || [ -f setup.py ] currently short-circuits incorrectly.
Condense the three near-identical tier tables into one format definition plus per-tier focus descriptions to trim ~20 lines of repeated scaffolding.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The body is command-first with scoring anchors and a concrete output template, and it does not explain concepts Claude already knows. Minor padding exists — the three tier tables repeat identical headers/columns verbatim and could be condensed to one format note — fitting anchor 4 (efficient with minor trimmable instances) rather than the every-token-earns-its-place level 5. | 4 / 5 |
Actionability | Guidance is concrete and mostly copy-paste ready: full bash scans, per-category scoring anchors, a weighted formula, and an exact report template. However, several flagship commands have executable defects — grep --include="*.{js,ts,...}" brace patterns match no real files, the PCRE '(?i)' group is used without -P under -E, and line 197 has a shell &&/|| precedence bug — so it is anchor 4 (mostly executable with minor gaps) rather than fully-executable level 5. | 4 / 5 |
Workflow Clarity | The sequence is clear and consistently applied: run each category's scan, score against the anchors, compute the weighted overall, and emit the tiered progression plan. All operations are read-only so the destructive/batch validation cap does not apply, but there are no checkpoints for handling tool failures (missing jq, npx downloads, absent lockfiles beyond the noted check), keeping it at anchor 4 rather than the explicit-validation level 5. | 4 / 5 |
Progressive Disclosure | There are no bundle files, and the single 330-line SKILL.md is uniformly structured with one section per category, a scoring/report section, and sources. All content is consumed in a single audit pass, so the single-file layout is defensible; the only candidate for extraction is the ~70-line report template. This fits anchor 4 (good structure, appropriately placed content, minor organization gaps) better than anchor 3, whose example is unstructured inline content that clearly belongs elsewhere. | 4 / 5 |
Total | 16 / 20 Passed |