CtrlK
BlogDocsLog inGet started
Tessl Logo

auth-nodejs-cloudbase

CloudBase Node SDK auth guide for server-side identity, user lookup, and custom login tickets. This skill should be used when Node.js code must read caller identity, inspect end users, or bridge an existing user system into CloudBase; not when configuring providers or building client login UI.

62

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./config/.claude/skills/auth-nodejs-cloudbase/SKILL.md

The canonical home for this skill is auth-nodejs-cloudbase in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

65%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with executable code and a clear agent workflow, but it is monolithic and repetitive: redundant when-to-use sections, repeated init boilerplate, and no progressive disclosure into reference files for a skill this large.

Suggestions

Consolidate the overlapping 'Activation Contract', 'When to use this skill', and 'Summary' trigger lists into a single source to reduce redundancy.

Extract the repeated tcb.init boilerplate into one shared snippet and reference it from each scenario instead of reprinting it nine times.

Move the API catalog and/or the scenario library into separate reference files (e.g. REFERENCE.md, SCENARIOS.md) so SKILL.md stays a concise overview with one-level-deep links.

Add an explicit validation checkpoint to the agent workflow (e.g. verify the SDK is installed and the env id resolves before writing scenario code).

DimensionReasoningScore

Conciseness

Mostly efficient and actionable, but redundant across the 'Activation Contract', 'When to use this skill', and 'Summary' sections, and the SDK init boilerplate repeats in every scenario, so it could be tightened.

2 / 3

Actionability

Every scenario ships executable TypeScript with exact method signatures, concrete queryUserInfo platform/platformId examples, and explicit customUserId constraints — copy-paste ready.

3 / 3

Workflow Clarity

The 'How to use' section gives a clear 5-step sequence, but there are no explicit validation/feedback checkpoints; error handling is generic try/catch rather than a validate-fix-retry loop.

2 / 3

Progressive Disclosure

No bundle/reference files exist and all API reference and nine scenarios live inline in one ~450-line file; well-organized sections prevent a score of 1, but content that should be split into reference files is inline.

2 / 3

Total

9

/

12

Passed

Description

85%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly bounds the skill to Node-side CloudBase auth with explicit positive and negative triggers. Trigger term coverage is the main weakness, missing some common natural variations.

Suggestions

Add a few natural user-facing trigger terms such as 'authentication', 'server-side auth', or 'who is the caller' to broaden natural-keyword coverage beyond the technical SDK terms.

Consider including the SDK package name '@cloudbase/node-sdk' as an explicit trigger token since the body relies on it.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'read caller identity, inspect end users, or bridge an existing user system into CloudBase' — beyond a single domain action.

3 / 3

Completeness

Explicitly states what it does ('auth guide for server-side identity, user lookup, and custom login tickets') and when to use it ('This skill should be used when Node.js code must read caller identity...'), plus a negative trigger.

3 / 3

Trigger Term Quality

Relevant keywords like 'Node.js', 'caller identity', 'user lookup', and 'custom login tickets' are present, but common variations such as 'authentication' and 'login' appear only in the negative clause, so coverage is incomplete.

2 / 3

Distinctiveness Conflict Risk

Niche is clearly scoped to Node-side server auth and explicitly excludes provider configuration and client login UI, with pointers to sibling skills, making conflicts unlikely.

3 / 3

Total

11

/

12

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 1 missing

Warning

Total

14

/

16

Passed

Repository
TencentCloudBase/CloudBase-AI-Toolkit
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.