CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

auth-wechat-miniprogram

CloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic.

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./config/source/skills/auth-wechat-miniprogram/SKILL.md

The canonical home for this skill is auth-wechat-miniprogram in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

53%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured as an overview with proper one-level-deep reference splitting, but it suffers from duplicated activation guidance, heavy repetition of the "native and automatic" fact, and no inline executable examples. The incorrect claim that Scenarios 1–4 are "from this file" undermines both actionability and workflow clarity. These are fixable issues concentrated in redundancy and navigation accuracy.

Suggestions

Fix the step-3 misdirection: change "Pick a scenario from this file" to point explicitly to references/extended-guide.md, where Scenarios 1–4 actually live (e.g., "Pick a scenario from the extended guide").

Add one minimal inline code example — such as a wx-server-sdk cloud function reading OPENID via cloud.getWXContext() — so the body carries executable guidance without requiring a trip to the reference file.

Delete the duplicated "When to use this skill" section and the "Reference index" section (both repeat the Activation Contract and the extended-guide link), and state the native/automatic-auth fact once in Core concepts instead of five times.

DimensionReasoningScore

Conciseness

The single key fact that auth is "native and automatic" is restated at least five times (Activation Contract gotchas, the "Key advantage" paragraph, "How to use" step 2, Core concepts points 1 and 4), and the "When to use this skill" section ("Use this skill for **WeChat Mini Program (小程序) authentication**... **Do NOT use for:**") duplicates the Activation Contract's use/not-use lists almost verbatim. The content is mostly efficient CloudBase-specific material Claude would not already know, but the duplicated sections and repeated claims are more than minor trimming. Not 2 because the majority of the body is genuinely useful domain content rather than padded explanation of known concepts; not 4 because two whole sections plus repeated statements are redundant.

3 / 5

Actionability

Quotes: "Use `wx-server-sdk` in cloud functions", "Use `wx.cloud` in Mini Program client code", "Ask the user for: `env` – CloudBase environment ID". Specific API names and a concrete first step are given, but the body contains no executable code or commands, and step 3 says "Pick a scenario from this file" while Scenarios 1–4 actually live in references/extended-guide.md — a navigation error that leaves the reader without the promised details. Not 4 because there is no copy-paste-ready guidance in the body and the scenario pointer is wrong; not 2 because the API names and setup steps exceed high-level hints.

3 / 5

Workflow Clarity

The "How to use this skill" section lists a clear five-step sequence (confirm env → understand flow → pick scenario → follow API shapes → consult docs if unsure), and step 1 acts as an environment-confirmation checkpoint with step 5 as an if-unsure fallback. However, other checkpoints are implicit (testing is deferred to Scenario 4 in the reference file), and the "Pick a scenario from this file" misdirection introduces a gap in the sequence. Not 4 because validation checkpoints are mostly missing or implicit rather than "most present"; not 2 because the steps are well-defined and correctly ordered rather than full of gaps.

3 / 5

Progressive Disclosure

The body is an overview with all detailed scenarios, patterns, and code appropriately split into references/extended-guide.md, clearly signaled ("For detailed scenarios, examples, and patterns, read [extended-guide.md](references/extended-guide.md)") and verified to be one level deep with no nested references. Not 5 because the "Reference index" section redundantly re-lists the same single link, and the scenario-location confusion (scenarios said to be "from this file" but actually in the reference) is a minor navigation gap.

4 / 5

Total

13

/

20

Passed

Description

82%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it explicitly states what the skill covers and when to use it, with concrete technical triggers (OPENID/UNIONID, wx.cloud) in third-person voice. The main residual weakness is that capabilities are expressed as topics ("guide", "identity handling") rather than concrete actions, which slightly limits specificity.

DimensionReasoningScore

Specificity

Quotes: "CloudBase WeChat Mini Program native authentication guide", "mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior". The domain is named precisely with concrete technical objects (OPENID/UNIONID, wx.cloud), but capabilities are phrased as topic nouns rather than listed actions ("guide" is not an action verb), so coverage is not comprehensive. Not 2 because the technical specifics go beyond minimal/generic domain-naming; not 4 because it does not list several specific concrete actions.

3 / 5

Completeness

Quotes: what — "CloudBase WeChat Mini Program native authentication guide"; when — "This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic". Both what and when are explicitly answered, and the when-clause includes concrete trigger phrases plus scoping, matching the anchor-5 example structure. Not 4 because the when is explicit with concrete triggers rather than merely present-but-vague.

5 / 5

Trigger Term Quality

Quotes: "mini program identity handling", "OPENID/UNIONID access", "`wx.cloud` auth behavior", "login is native and automatic". These are natural phrases a developer working on this stack would actually say. Not 5 because common synonyms and variations are missing (e.g., "小程序", "WeChat login", "user identity in cloud functions"); clearly above 3 since multiple natural, relevant trigger terms are present rather than just "some".

4 / 5

Distinctiveness Conflict Risk

Quotes: "CloudBase WeChat Mini Program native authentication", "in projects where login is native and automatic". The triple scoping (CloudBase + WeChat Mini Program + native/automatic auth) carves out a clear niche with distinct triggers, minimal conflict risk against sibling skills like auth-web or auth-nodejs. Not 4 because the niche is unusually well-delimited by both domain and auth-mode qualifiers.

5 / 5

Total

17

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

TencentCloudBase/CloudBase-AI-Toolkit

Path

config/source/skills/auth-wechat-miniprogram/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.