CtrlK
BlogDocsLog inGet started
Tessl Logo

auth-nodejs-cloudbase

CloudBase Node SDK auth guide for server-side identity, user lookup, and custom login tickets. This skill should be used when Node.js code must read caller identity, inspect end users, or bridge an existing user system into CloudBase; not when configuring providers or building client login UI.

68

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is auth-nodejs-cloudbase in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A thorough, highly actionable skill body with copy-paste code for every common Node auth scenario and a clear agent workflow. The main weakness is repetition — duplicated init boilerplate per scenario and three overlapping when-to-use sections — which inflates token cost without adding clarity.

Suggestions

Show the `tcb.init`/`app.auth()` init pattern once and reference it from each scenario instead of repeating the four-line boilerplate in all 8 scenarios.

Collapse the overlapping 'Activation Contract', 'When to use this skill', and 'Summary' use-when/do-not-use lists into a single source of truth to remove triplicated guidance.

Consider moving the full API-signature reference and the scenario catalog into separate reference files (e.g. REFERENCE.md, SCENARIOS.md) so SKILL.md stays a lean overview, improving progressive disclosure.

DimensionReasoningScore

Conciseness

Mostly efficient canonical API shapes, but it repeats the same `tcb.init`/`app.auth()` boilerplate across all 8 scenarios and restates the use-when / do-not-use guidance in three separate sections (Activation Contract, When to use, Summary), which could be tightened.

3 / 5

Actionability

Nine scenarios provide complete, copy-paste-ready TypeScript covering the common cases (caller identity, profile lookup by uid/identifier, client IP, custom tickets), with documented method signatures and constraints.

5 / 5

Workflow Clarity

The 'How to use this skill' section gives a clear 5-step sequence (clarify runtime → confirm env/SDK → pick scenario → follow API shapes → consult docs if unsure) and scenarios use try/catch, but there are no explicit validate/retry checkpoints; this is not a destructive/batch skill so the 3-cap does not apply.

4 / 5

Progressive Disclosure

Well-organized into clearly headed sections with clearly signaled sibling-skill references ('Then also read', Summary pairings); no bundle files exist, and the inline API reference and scenario catalog could plausibly be split into separate files, but keeping canonical shapes inline is defensible.

4 / 5

Total

16

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-scoped description that clearly states both the capability and the triggering conditions, with explicit negative guidance to avoid mis-selection. It would benefit only from a few more natural trigger synonyms to reach top trigger-term coverage.

DimensionReasoningScore

Specificity

Names the domain (CloudBase Node SDK auth) and lists multiple concrete capabilities — 'server-side identity, user lookup, and custom login tickets' and 'read caller identity, inspect end users, or bridge an existing user system' — giving comprehensive coverage.

5 / 5

Completeness

Explicitly answers what ('CloudBase Node SDK auth guide for server-side identity, user lookup, and custom login tickets') and when ('This skill should be used when Node.js code must read caller identity...; not when...'), with concrete trigger phrases and negative scope.

5 / 5

Trigger Term Quality

Good natural-term coverage ('Node.js code', 'read caller identity', 'inspect end users', 'custom login tickets', 'CloudBase'), but lacks synonyms/variants a user might say (e.g. 'who is calling') and has no file-extension-style triggers, so it is not quite comprehensive.

4 / 5

Distinctiveness Conflict Risk

A clear narrow niche (Node server-side identity in CloudBase) reinforced by explicit exclusions ('not when configuring providers or building client login UI'), minimizing overlap with sibling auth skills.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
TencentCloudBase/CloudBase-AI-Toolkit
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.