CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

auth-wechat-miniprogram

CloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic.

Quality

79%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./config/.claude/skills/auth-wechat-miniprogram/SKILL.md

The canonical home for this skill is auth-wechat-miniprogram in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

63%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Well-structured progressive disclosure and a clear agent-facing workflow, but the body itself is a router rather than an actionable guide: all executable code lives one file away, and the activation/use-cases guidance is stated redundantly across three overlapping sections. Tightening the duplication and inlining one minimal copy-paste example would lift both conciseness and actionability.

Suggestions

Consolidate the three overlapping activation sections ("Activation Contract", "When to use this skill", and the duplicated "Do NOT use for" lists) into a single use/don't-use block to remove the repeated guidance.

Inline one minimal copy-paste example in the body (e.g., `wx.cloud.init()` in app.js and reading `event.userInfo.OPENID` in a cloud function) so the skill is actionable without first opening references/extended-guide.md.

State the 'native and automatic, no explicit login needed' point once in Core concepts instead of repeating it in the Activation Contract, Key advantage, How-to-use, and Core concepts sections.

DimensionReasoningScore

Conciseness

The body is mostly efficient but carries real duplication: when-to-use guidance appears three times ("Use this first when", "When to use this skill", "Do NOT use for" appears twice) and the claim that auth is "native and automatic" is repeated in nearly every section ("seamless and automatic", "No explicit login API calls needed", "No explicit login required", "Users are automatically authenticated"). This matches anchor 3's 'mostly efficient but could be tightened' rather than anchor 2, since no section explains concepts Claude wouldn't know and the total length is moderate.

3 / 5

Actionability

The body gives concrete routing — "Use `wx-server-sdk` in cloud functions", "Use `wx.cloud` in Mini Program client code", "For basic user identity in cloud functions, use Scenario 2" — but every executable code example is deferred to references/extended-guide.md, leaving the body itself without a single runnable snippet or command. This sits between anchor 2 (high-level hints, missing steps) and anchor 4 (mostly executable guidance), matching anchor 3's 'some concrete guidance but incomplete'.

3 / 5

Workflow Clarity

"How to use this skill (for a coding agent)" provides a clear 5-step numbered sequence (confirm env → understand flow → pick scenario → follow API shapes → consult docs), with explicit scenario routing and a dedicated testing scenario (Scenario 4) acting as a verification checkpoint. It matches anchor 4's 'clear sequence with most checkpoints present' rather than anchor 5, which requires explicit validate/fix/retry loops, and the destructive/batch cap does not apply since this is guidance, not a batch operation.

4 / 5

Progressive Disclosure

The body is a clean overview that pushes all detailed scenarios and code to a single one-level-deep reference (references/extended-guide.md, verified present, 415 lines, clearly signaled both in "Extended guide" and the reference index), and it explicitly documents a fallback for sibling-skill paths that may be absent. This matches anchor 5's 'clear overview with well-signaled one-level-deep references' rather than anchor 4, which would require notable organization gaps; the only nit — the reference being listed twice — is trivial.

5 / 5

Total

15

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it states a clear niche, uses third person, includes an explicit 'should be used when' clause with concrete trigger phrases (OPENID/UNIONID, wx.cloud), and is unlikely to collide with sibling auth skills. The only weaknesses are mild — a few generic noun-phrase capabilities and some missing natural synonyms like '小程序' or 'mini program login'.

DimensionReasoningScore

Specificity

The description lists several concrete capability areas — "mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior" — naming actual identifiers and APIs with only minor gaps (e.g., cloud function identity is not explicitly named). It sits above anchor 3 (which expects only 1-2 concrete actions) but below anchor 5, since items like "identity handling" and "authentication guide" are noun phrases rather than fully comprehensive concrete actions.

4 / 5

Completeness

Both halves are explicit: the "what" is "CloudBase WeChat Mini Program native authentication guide" and the "when" is the explicit trigger clause "This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic." This matches anchor 5 (clear what AND when with concrete trigger phrases) rather than anchor 4, whose 'when' clause is generic.

5 / 5

Trigger Term Quality

Natural trigger terms are well covered: "WeChat Mini Program", "OPENID/UNIONID", "wx.cloud auth", "login", and "identity handling" — phrases a user with this need would plausibly say. It falls short of anchor 5's comprehensive synonym coverage because common variations like "小程序", "mini program login", and "user identity in cloud functions" are missing, matching anchor 4's 'good coverage, a few natural terms missing'.

4 / 5

Distinctiveness Conflict Risk

The niche is tightly scoped to CloudBase WeChat Mini Program native auth with distinctive triggers (`wx.cloud`, OPENID/UNIONID, native/automatic login), giving minimal overlap risk with sibling skills like web auth or Node SDK auth. It clearly matches anchor 5's 'clear niche with distinct triggers' rather than anchor 4, which still admits overlap with closely related skills.

5 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

TencentCloudBase/CloudBase-AI-Toolkit

Path

config/.claude/skills/auth-wechat-miniprogram/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.