CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

auth-wechat-miniprogram

CloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic.

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugin/cloudbase/skills/auth-wechat-miniprogram/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

52%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured as a routing layer over a verified one-level-deep reference, with a clear activation contract and step sequence. However, it is noticeably redundant — the use-when guidance and the 'automatic auth' message are each repeated multiple times — and it provides no executable API or code detail itself despite claiming canonical method shapes.

Suggestions

Delete the 'When to use this skill' section: its use-cases and 'Do NOT use for' list duplicate the Activation Contract, cutting roughly 20 lines of redundancy.

State the native/automatic authentication model once (e.g., in Core concepts) instead of five times across the Key advantage paragraph, step 2, and Core concepts points 1 and 4.

Inline one minimal executable snippet (e.g., a cloud function obtaining identity via getWXContext) in the body, since it claims 'method names and parameter shapes in this file are canonical' but currently contains none.

DimensionReasoningScore

Conciseness

The 'When to use this skill' section wholesale duplicates the Activation Contract's use/not-use lists, and the 'native and automatic' auth message is restated five-plus times across the Key advantage paragraph, step 2 bullets, and Core concepts points 1 and 4 — several padded sections, not just a few.

2 / 5

Actionability

Routing guidance is concrete (specific scenario numbers, 'Use `wx-server-sdk` in cloud functions', sibling skill paths), but the body contains no code or API shapes and instructs 'Treat method names and parameter shapes in this file as canonical' despite having none — all executable detail is delegated to the reference.

3 / 5

Workflow Clarity

The five-step 'How to use this skill' sequence is clearly ordered with an explicit confirm-environment checkpoint and an if-unsure fallback to official docs, and testing is routed to Scenario 4; the gap is the absence of post-implementation validation in the body itself.

4 / 5

Progressive Disclosure

The split is appropriate — overview and routing in the body, scenarios and patterns in references/extended-guide.md (verified to exist, one level deep, no nested references) — but the reference is listed twice (Extended guide plus Reference index) and sibling paths like ../miniprogram-development/SKILL.md point outside this bundle.

4 / 5

Total

13

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concise, third-person, with an explicit use-when clause and concrete domain triggers. Its main weaknesses are topic-style rather than action-style capability phrasing and a few missing natural synonyms, plus no explicit boundary against the sibling web/Node auth skills.

DimensionReasoningScore

Specificity

Lists several concrete capability areas — 'mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior' — though framed as noun-phrase topics rather than action verbs, leaving minor gaps in coverage.

4 / 5

Completeness

Explicitly answers both what ('CloudBase WeChat Mini Program native authentication guide') and when ('This skill should be used when users need mini program identity handling, OPENID/UNIONID access...') with concrete trigger phrases, in third-person voice.

5 / 5

Trigger Term Quality

Good keyword coverage of natural user terms ('WeChat Mini Program', 'authentication', 'login', 'identity', 'OPENID/UNIONID', 'wx.cloud'), but a few natural synonyms such as '小程序' or 'WeChat login' are missing, so it falls short of the comprehensive anchor.

4 / 5

Distinctiveness Conflict Risk

Clear niche with distinct triggers (CloudBase mini program, wx.cloud, OPENID/UNIONID), but closely related sibling auth skills exist (web, Node) and the description carries no explicit exclusion, leaving minor overlap risk.

4 / 5

Total

17

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

TencentCloudBase/CloudBase-AI-Toolkit

Path

plugin/cloudbase/skills/auth-wechat-miniprogram/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.