auth-wechat-miniprogram

CloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic.

Quality

68%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugin/cloudbase/skills/auth-wechat-miniprogram/SKILL.md

Quality

Content

63%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, appropriately disclosed skill body with a clear usage workflow and clean reference split. Its weak spots are structural redundancy between the activation and when-to-use sections and the absence of any inline executable code examples.

Suggestions

Merge the 'Activation Contract' and 'When to use this skill' sections into one, keeping a single 'Do NOT use for' list and de-duplicating the 'native and automatic' emphasis to tighten the body.

Inline at least one minimal executable snippet (e.g. the cloud.getWXContext() OPENID extraction) in SKILL.md so the body is actionable without requiring the reference file.

Convert the soft 'consult official docs if unsure' into an explicit validation checkpoint (e.g. 'confirm the method exists in official CloudBase docs before using it').

Dimension	Reasoning	Score
Conciseness	Mostly efficient and skill-specific, but the 'Activation Contract' and 'When to use this skill' sections duplicate each other (two 'Do NOT use for' lists, overlapping 'Common mistakes'), and the 'native and automatic' point is restated several times; these could be merged and tightened.	3 / 5
Actionability	Provides concrete procedural steps and names specific APIs (wx.cloud.init, wx-server-sdk, scenario routing to 1-4), but the body itself contains no executable code — all copy-paste examples are delegated one level deep to extended-guide.md, leaving the body's guidance concrete but incomplete.	3 / 5
Workflow Clarity	The 'How to use this skill' section gives a clear 5-step sequence (confirm env, understand flow, pick scenario, follow API shapes, consult docs if unsure) with no destructive/batch operations requiring feedback loops; only the soft 'consult docs if unsure' checkpoint keeps it from a 5.	4 / 5
Progressive Disclosure	SKILL.md is a clear overview that appropriately splits bulk detail into a single one-level-deep, well-signaled reference (references/extended-guide.md, verified to contain the scenario code), with an explicit reference index; navigation is easy.	5 / 5
	Total	15 / 20 Passed

Description

73%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A well-targeted description with an explicit 'use when' clause and concrete technical triggers; its main weakness is framing capabilities as a 'guide' rather than enumerating concrete actions. It is clearly distinguishable from sibling auth skills.

Suggestions

Replace the 'guide' framing with concrete verbs, e.g. 'Implements and explains WeChat Mini Program native authentication in CloudBase — retrieving OPENID/UNIONID in cloud functions and using wx.cloud auth behavior.'

Add natural synonyms a user might say, such as '小程序', 'cloud functions', and lowercase 'openid/unionid', to broaden trigger coverage.

Dimension	Reasoning	Score
Specificity	Names the domain (CloudBase WeChat Mini Program native auth) and a few capability areas ('identity handling, OPENID/UNIONID access, or wx.cloud auth behavior'), but frames itself as a 'guide' rather than listing multiple concrete performed actions, so it sits at the anchor-3 level rather than 4.	3 / 5
Completeness	Explicitly states both what ('CloudBase WeChat Mini Program native authentication guide') and when ('This skill should be used when users need...') with concrete trigger phrases; the 'what' is slightly generic ('guide'), so it does not reach the fully concrete anchor-5 level.	4 / 5
Trigger Term Quality	Good keyword coverage with natural terms a developer would say ('WeChat Mini Program', 'authentication', 'OPENID/UNIONID', 'wx.cloud'); a few common variations are missing (e.g. '小程序', 'cloud functions', lowercase 'openid'), keeping it just below comprehensive.	4 / 5
Distinctiveness Conflict Risk	A clear, narrow niche (WeChat Mini Program native auth in CloudBase where login is 'native and automatic') with distinct triggers and minimal overlap risk against sibling web/nodejs auth skills.	5 / 5
	Total	16 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	15 / 16 Passed

Repository: TencentCloudBase/CloudBase-AI-Toolkit
Path: plugin/cloudbase/skills/auth-wechat-miniprogram/SKILL.md
Commit: f07c33c

Reviewed: 4 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.