CtrlK
BlogDocsLog inGet started
Tessl Logo

code-review

Automated code review skill focusing on financial security, token leakage detection, concurrency bugs, EF Core performance traps, and architectural compliance.

60

Quality

71%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.agents/skills/code-review/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

83%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a dense, well-organized, highly actionable review checklist that assumes Claude's competence and avoids padding. Its main gap is the workflow, which lacks an explicit verification checkpoint to confirm findings before reporting.

Suggestions

Add an explicit validation step to the workflow, e.g. '5. Verify findings: re-check each flagged location against the actual code to confirm the issue and line range before reporting.'

Include a brief error-recovery loop for false positives (e.g. 'If a flagged pattern is intentional/configured elsewhere, downgrade or drop the finding').

Consider splitting the per-layer detail into a references file once the checklist grows, keeping SKILL.md as a concise overview.

DimensionReasoningScore

Conciseness

The body is lean and directive — using MUST/NEVER with concrete APIs like 'Math.Round(val, 2, MidpointRounding.ToEven)', '[Timestamp]', and '.AsNoTracking()' — and never over-explplies concepts Claude already knows (EF Core, decimal, MassTransit).

5 / 5

Actionability

Provides concrete executable patterns to check for (specific APIs, attributes, and query methods) plus a copy-paste-ready diff and a structured finding template with file-line links, covering the common review cases.

5 / 5

Workflow Clarity

The 4-step workflow (Fetch, Execute Checklist, Classify, Generate Report) gives a clear sequence but has no explicit validation or verification checkpoint confirming findings against the actual code before reporting, which caps workflow clarity at 3.

3 / 5

Progressive Disclosure

Single self-contained file with well-organized sections (5 checklist layers, output format, workflow) and no nested or buried references; at ~75 lines it sits just above the simple-skill threshold, so it is well-structured but not a clean 5.

4 / 5

Total

17

/

20

Passed

Description

58%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly communicates a specialized code-review niche with several concrete focus areas, but it lacks a 'Use when...' trigger clause and leans on technical jargon over natural user phrases. Adding an explicit trigger condition and more user-natural keywords would raise completeness and trigger-term quality.

Suggestions

Add an explicit 'Use when...' clause, e.g. 'Use when reviewing or auditing C# code, pull requests, or diffs in the FinanceHub repository.'

Soften jargon with natural user-facing terms (e.g. 'code review', 'pull request review') so the description triggers on how users actually phrase the request.

Lead with a concrete action verb in third person (e.g. 'Reviews and audits C# code...') to sharpen specificity.

DimensionReasoningScore

Specificity

Lists several concrete focus areas — 'financial security, token leakage detection, concurrency bugs, EF Core performance traps, and architectural compliance' — giving specific scope, though it names domains more than discrete actions and is not fully comprehensive.

4 / 5

Completeness

Provides a clear 'what' (automated code review across five focus areas) but lacks any 'Use when...' or equivalent explicit 'when' trigger, which per the guidelines caps completeness at 3.

3 / 5

Trigger Term Quality

Contains multiple relevant domain keywords ('code review', 'financial security', 'token leakage', 'concurrency') but they are technical jargon rather than natural phrases a user would spontaneously say, and no 'Use when...' trigger is present.

3 / 5

Distinctiveness Conflict Risk

The financial/.NET microservice specialization creates a clear niche with low conflict risk, though it still overlaps slightly with general code-review skills.

4 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 1 suspicious

Warning

Total

15

/

16

Passed

Repository
JoseMD12/finance-hub
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.