CtrlK
BlogDocsLog inGet started
Tessl Logo

auth-web-cloudbase

CloudBase Web Authentication Quick Guide for frontend integration after auth-tool has already been checked. Provides concise and practical Web authentication solutions with multiple login methods and complete user management.

57

Quality

66%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./config/.claude/skills/auth-web-cloudbase/SKILL.md

The canonical home for this skill is auth-web-cloudbase in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is well-structured, actionable, and uses progressive disclosure effectively with a real bundle reference. Its main weakness is redundancy: the same accessKey/session warning recurs several times, inflating the token budget without adding information.

Suggestions

Consolidate the repeated accessKey/getLoginState/getSession warning into a single authoritative callout; cross-reference it from the other locations instead of restating it.

Tighten the Supabase-comparison block in 'Core Capabilities' to the differences only, since the similarities are restated from the description.

Formalize the OTP send→save-callback→verify flow as a numbered Quick Start sequence with an explicit validation step rather than prose in the gotchas.

DimensionReasoningScore

Conciseness

The body is mostly efficient technical guidance assuming Claude's competence, but the accessKey/getLoginState/getSession warning is repeated in four places (gotchas, parameter map, Quick Start comments), which is unnecessary padding.

3 / 5

Actionability

Provides copy-paste-ready init code plus concrete MCP calls such as queryAppAuth(action="listProviders") and manageAppAuth(action="patchLoginStrategy", patch={usernamePassword:true}), with only minor gaps in the full sign-in flow.

4 / 5

Workflow Clarity

The activation contract gives clear sequencing (check providers → write frontend code) with pre-flight validation checkpoints (verify provider On=TRUE, check getLoginConfig), though error-recovery feedback loops are hinted rather than formalized.

4 / 5

Progressive Disclosure

A concise overview body points to a single one-level-deep reference, references/extended-guide.md (verified to exist), with a clearly signaled 'Extended guide' section and a reference index for easy navigation.

5 / 5

Total

16

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific to a clear niche and carries usable trigger terms, but it lacks an explicit 'Use when…' trigger clause and leans on some generic phrasing ('concise and practical solutions'). It is solid but not exemplary.

Suggestions

Add an explicit 'Use when…' trigger clause naming concrete user requests, e.g. 'Use when adding a CloudBase Web login, registration, session, or protected-route flow with @cloudbase/js-sdk.'

Replace 'concise and practical Web authentication solutions' with concrete actions (e.g. 'implements password, OTP, OAuth, and anonymous sign-in plus session management').

Include natural synonyms users say ('sign-in', 'log in', 'auth guard') to broaden trigger coverage.

DimensionReasoningScore

Specificity

Names the domain (CloudBase Web Auth) and a couple of concrete capabilities ('multiple login methods and complete user management'), but 'concise and practical Web authentication solutions' is generic padding rather than a comprehensive action list.

3 / 5

Completeness

The 'what' is clear, but the only 'when' is a precondition ('after auth-tool has already been checked') rather than an explicit trigger; per the missing-'Use when…' guideline completeness is capped at 3.

3 / 5

Trigger Term Quality

Natural terms like 'Web Authentication', 'frontend integration', and 'login methods' are present and would be said by users, though a few common synonyms (e.g. 'sign-in', 'log in') and SDK package names are missing.

4 / 5

Distinctiveness Conflict Risk

Scoped tightly to CloudBase Web frontend auth, which is a clear niche; only minor overlap risk with the sibling auth-tool-cloudbase skill it explicitly references.

4 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
TencentCloudBase/CloudBase-AI-Toolkit
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.