CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

code-review-bot

Use this skill when you want to automatically review GitHub pull requests and post line-level comments with findings, suggestions, and approval recommendations.

Quality

79%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./external/goose-recipes/code-review-bot/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, token-efficient skill whose executable code carries the whole workflow. Its main gap is the absence of validation and error-handling checkpoints before it posts comments to a live PR (a batch, outward-facing operation), which the rubric caps at workflow clarity 3; a hardcoded model pin slightly dings conciseness.

Suggestions

Add validation before posting: skip or alter the review when findings are empty, surface (rather than silently apply) the 3000-character diff truncation, and handle API errors with a retry or explicit failure report instead of crashing mid-review.

Consider a dry-run flag (e.g., REVIEW_DRY_RUN=1 prints the review body instead of calling pr.create_review) so the outward-facing posting step can be verified before it touches a real PR.

Move the pinned 'claude-opus-4-6' model id to a variable with a note, or drop the pin, to avoid time-sensitive version info decaying in the skill body.

DimensionReasoningScore

Conciseness

The body is lean: a one-sentence overview, a two-command setup, and dense executable code with no explanation of concepts Claude already knows. Not 5 because it pins a time-sensitive model version ('claude-opus-4-6') inline and the Quick Reference table partially duplicates the severity/category enums already encoded in the tool schema. Well above 3 — there is no padded or unnecessary prose.

4 / 5

Actionability

Fully executable, copy-paste-ready code covering the entire pipeline (auth, diff fetch, per-file LLM review via tool-use, severity-grouped review posting), plus concrete setup commands. The examples cover the common case end to end.

5 / 5

Workflow Clarity

The sequence is present in code (fetch diff → review each file → post review), but this is an outward-facing batch operation — posting review comments to a live PR — with no validation or verification step: diffs are silently truncated at 3000 chars, there is no error handling for API failures, and no check before posting. The rubric caps workflow clarity at 3 for batch operations without validation, which takes precedence over the single-action exception. Not 2 because the sequence itself is coherent and fully defined in executable code.

3 / 5

Progressive Disclosure

A single-file skill with well-organized sections (Overview, Setup, PR Review Engine, Quick Reference) and no nested or dangling references — there is nothing below a 5 except that the 105-line code block could arguably live in a scripts/ file with SKILL.md kept as an overview. Minor organization gap, not the inlining of content that clearly belongs elsewhere.

4 / 5

Total

16

/

20

Passed

Description

73%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with concrete actions and a clear, distinct niche. Its main weaknesses are second-person voice (which costs it specificity under the rubric) and a 'when' clause that restates the 'what' instead of supplying distinct trigger situations or synonyms like 'PR' or 'code review'.

Suggestions

Rewrite in third person to match the rubric's voice requirement, e.g., 'Automatically reviews GitHub pull requests and posts line-level comments with findings, suggestions, and approval recommendations. Use when the user asks to review a PR, run a code review, or comment on a pull request.'

Make the 'when' clause non-circular by naming trigger situations distinct from the capability statement (user mentions a PR, asks for a code review bot, wants automated review comments).

Add natural synonyms such as 'PR' and 'code review' to improve trigger term coverage.

DimensionReasoningScore

Specificity

The description lists several concrete actions ('automatically review GitHub pull requests', 'post line-level comments with findings, suggestions, and approval recommendations'), which fits the score-4 anchor, but it is written in second person ('Use this skill when you want to'), which the rubric penalizes by reducing specificity by 1. It is not a 2 because the actions named are concrete and multi-part, well beyond 'minimal or generic'.

3 / 5

Completeness

Both 'what' (review PRs, post line-level comments with findings/suggestions/approval recommendations) and an explicit 'when' ('Use this skill when you want to automatically review...') are present. Not 5 because the 'when' clause is circular — it restates the what rather than naming concrete trigger situations (e.g., 'when the user asks to review a PR or diff').

4 / 5

Trigger Term Quality

Natural terms users would say are present: 'GitHub pull requests', 'review', 'line-level comments', 'findings', 'approval'. It falls short of 5 because common synonyms like 'PR', 'code review', and 'diff review' are missing. It is above 3 because the keywords present are the phrases a user would naturally use, not jargon.

4 / 5

Distinctiveness Conflict Risk

The description carves out a clear niche — automated GitHub PR review with line-level comment posting and approval recommendations — with trigger terms that would not plausibly fire a different skill. Minimal conflict risk.

5 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

ProwlrBot/prowlr-marketplace

Path

external/goose-recipes/code-review-bot/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.