Name: auth-web-cloudbase
Rating: 60.8 (1 reviews)
Author: TencentCloudBase

auth-web-cloudbase

CloudBase Web Authentication Quick Guide for frontend integration after auth-tool has already been checked. Provides concise and practical Web authentication solutions with multiple login methods and complete user management.

Quality

71%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./config/.claude/skills/auth-web-cloudbase/SKILL.md

The canonical home for this skill is auth-web-cloudbase in TencentCloudBase/CloudBase-AI-Toolkit

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable with executable v3 snippets, strong workflow sequencing, and validation checkpoints backed by a real extended-guide reference. Its main weakness is redundancy: several critical warnings are restated multiple times across sections.

Suggestions

Consolidate the repeated accessKey/getSession/getLoginState/verifyOtp warnings into a single canonical block and cross-reference it instead of restating them in the gotchas, parameter map, quick start, and cookbook.

Move the long 'Common mistakes / gotchas' list into references/extended-guide.md, keeping only the top 3-4 highest-risk items inline in SKILL.md.

Trim the duplicated Prerequisites heading (lines 57-58 vs 80-86) to reduce padding.

Dimension	Reasoning	Score
Conciseness	The body is mostly efficient and avoids explaining basic concepts, but the same three warnings (getLoginState misleading uid, accessKey != session, verifyOtp callback form) are repeated across the gotchas, parameter map, quick start, and cookbook sections and could be tightened.	3 / 5
Actionability	Copy-paste-ready v3 API snippets (signInWithPassword, signUp, data.verifyOtp, getSession, onAuthStateChange, resetPasswordForEmail, signOut) plus specific MCP calls cover the common cases fully.	5 / 5
Workflow Clarity	The Activation Contract sequences ordering (use-first / read-before / do-not-start-here), prerequisites include explicit validation (queryAppAuth listProviders/getPublishableKey with enable-if-empty feedback loops), and the Completion Bar provides a checklist.	5 / 5
Progressive Disclosure	A clearly signaled one-level-deep reference (references/extended-guide.md, which exists) is present with a reference index, but a large volume of detailed gotchas and cookbook content is inlined in SKILL.md rather than moved to the extended guide.	4 / 5
	Total	17 / 20 Passed

Description

62%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a clear, third-person statement that covers what the skill does and gives a conditional when clause, with a well-scoped niche. It is held back by somewhat generic action language and missing natural trigger synonyms.

Suggestions

Add concrete method names (e.g. 'signInWithPassword, OTP, OAuth, and anonymous login') to specificity rather than the generic 'multiple login methods'.

Include natural trigger phrases users would say, such as 'Use when adding a login page, registration, session handling, or protected Web route with @cloudbase/js-sdk'.

Sharpen the 'when' clause into an explicit 'Use when...' sentence to lift completeness toward 5.

Dimension	Reasoning	Score
Specificity	Names the domain ('CloudBase Web Authentication') and a couple of concrete actions ('multiple login methods and complete user management'), but the actions are generic and not comprehensively enumerated.	3 / 5
Completeness	States both what it does (Web authentication solutions with login methods and user management) and when to use it ('for frontend integration after auth-tool has already been checked'), though the trigger could be more explicit.	4 / 5
Trigger Term Quality	Relevant keywords ('Web authentication', 'login methods', 'user management', 'frontend integration') are present, but common natural variations like 'sign-in', 'register', 'session', or 'OAuth' are missing.	3 / 5
Distinctiveness Conflict Risk	Tied to a clear niche (CloudBase Web auth) and explicitly scoped against the sibling auth-tool-cloudbase skill, with only minor overlap risk within the CloudBase family.	4 / 5
	Total	14 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	15 / 16 Passed

Repository: TencentCloudBase/CloudBase-AI-Toolkit
Path: config/.claude/skills/auth-web-cloudbase/SKILL.md
Commit: ef9f182

Reviewed: 3 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.