CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

auth-nodejs-cloudbase

CloudBase Node SDK auth guide for server-side identity, user lookup, and custom login tickets. This skill should be used when Node.js code must read caller identity, inspect end users, or bridge an existing user system into CloudBase; not when configuring providers or building client login UI.

Quality

84%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is auth-nodejs-cloudbase in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a strong, executable scenario cookbook with exact SDK shapes, constraints, and security best practices throughout. Its weaknesses are structural: significant duplication of trigger guidance and init boilerplate, and a monolithic single-file layout where scenario/API detail could live in reference files.

Suggestions

Collapse the 'Activation Contract', 'When to use this skill', and 'Summary' sections into one trigger statement — the near-identical guidance currently appears three times.

State the tcb.init({ env }) + app.auth() boilerplate once and drop it from every scenario code block, saving ~25 lines of repetition.

Move the API signature list and the nine scenarios into a references/ file (e.g. scenarios.md) linked one level deep, keeping SKILL.md as a lean overview with the decision tree for picking a scenario.

DimensionReasoningScore

Conciseness

The core scenario content is tight, but trigger guidance is restated three times ('Activation Contract', 'When to use this skill', 'Summary') and all nine scenarios repeat the identical three-line tcb.init boilerplate. This is more than anchor 4's 'minor instances', but it never explains concepts Claude already knows, so it does not fall to anchor 2.

3 / 5

Actionability

Every scenario ships complete, copy-paste TypeScript with exact SDK method shapes and parameter fields (getUserInfo destructuring, queryUserInfo platform/platformId examples, createTicket with refresh/expire options), plus concrete constraints (customUserId length 4-32 and allowed characters). The import/require mix in scenarios 7-8 is trivial since CloudBase functions run CommonJS.

5 / 5

Workflow Clarity

'How to use this skill' gives a clear five-step sequence (clarify runtime/responsibility, confirm env and SDK, pick scenario, follow API shapes, consult docs if unsure) and scenarios include try/catch error handling. No explicit validate-then-proceed checkpoints exist (e.g. verify a ticket before returning it), which keeps it below anchor 5.

4 / 5

Progressive Disclosure

No bundle files exist and headers make the file navigable, with clearly signaled one-level-deep sibling references. However, the full API signature list and nine-scenario cookbook are reference-level material inlined in a single 440-line SKILL.md, matching anchor 3's 'content that should be separate is inline' rather than anchor 4's 'most content is appropriately placed'.

3 / 5

Total

15

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a strong two-sentence contract: concrete capabilities, explicit 'use when' triggers, and explicit negative triggers that fence it off from sibling skills. Its only weakness is a handful of missing natural synonyms that users might phrase differently.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'read caller identity', 'inspect end users', 'user lookup', 'custom login tickets', 'bridge an existing user system into CloudBase' — comprehensively covering the skill's scope. Only the minor client-IP scenario is unmentioned, which is not enough to drop to anchor 4's 'minor gaps'.

5 / 5

Completeness

Explicitly answers both: what ('CloudBase Node SDK auth guide for server-side identity, user lookup, and custom login tickets') and when ('This skill should be used when Node.js code must... not when configuring providers or building client login UI'), with concrete trigger phrases and negative triggers. Clear anchor 5; anchor 4's 'when could be more explicit' does not apply.

5 / 5

Trigger Term Quality

Good natural-term coverage: 'Node.js', 'caller identity', 'user lookup', 'custom login', 'end users'. A few natural phrases users would say are missing ('authentication', 'get user info', 'who is calling'), which keeps it below anchor 5's comprehensive synonym coverage.

4 / 5

Distinctiveness Conflict Risk

Clear niche (server-side Node identity in CloudBase) with explicit negative triggers separating it from provider configuration and client login UI, minimizing collision with sibling skills. Not 4, since overlap risk is minimal rather than minor.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

TencentCloudBase/CloudBase-AI-Toolkit

Path

config/source/skills/auth-nodejs-cloudbase/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.