CtrlK
BlogDocsLog inGet started
Tessl Logo

auth-wechat-miniprogram

CloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic.

56

Quality

64%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./config/.claude/skills/auth-wechat-miniprogram/SKILL.md

The canonical home for this skill is auth-wechat-miniprogram in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

60%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured with a clear activation contract, a sequenced workflow, and a properly signaled one-level reference to an existing extended guide. Its main weakness is redundancy between the Activation Contract and When-to-use sections, and the deferral of executable content to the referenced file.

Suggestions

Collapse the duplicate "Do NOT use for" / when-to-use material from the "When to use this skill" section into the Activation Contract to remove redundancy.

Inline at least one small executable snippet (e.g. reading openid from a cloud function event) so the body is actionable without opening the extended guide.

State the "native and automatic / no OAuth" key advantage once in Core Concepts rather than repeating it across multiple sections.

DimensionReasoningScore

Conciseness

Mostly efficient but noticeably redundant: the "Activation Contract" and "When to use this skill" sections repeat the same triggers and the "Do NOT use for" list appears twice, and the "native and automatic / no OAuth" point is restated several times — fitting the anchor of mostly efficient with some unnecessary explanation that could be tightened.

3 / 5

Actionability

Names concrete APIs ("wx.cloud.init", "wx-server-sdk", "wx.cloud") and a clear scenario-routing step, but the body itself is largely conceptual/navigational and defers all executable code to extended-guide.md, matching the anchor of concrete guidance that is incomplete with key details elsewhere.

3 / 5

Workflow Clarity

The 5-step "How to use this skill" workflow is a coherent, ordered sequence (confirm env, understand flow, pick scenario, follow API shapes, consult docs when unsure); this is not a destructive/batch operation so no validation cap applies, but explicit checkpoints/feedback loops are absent, keeping it just below 5.

4 / 5

Progressive Disclosure

Good structure with clear sections and a well-signaled one-level-deep reference to references/extended-guide.md (verified present), plus a reference index; minor organization gaps (duplicated when-to-use guidance and inline core concepts) keep it below the cleanest anchor.

4 / 5

Total

14

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is third-person, gives explicit use-when guidance with concrete triggers, and carves out a distinct niche. It is held back from the top band by the non-action-verb "guide" framing and slightly incomplete keyword/action coverage.

Suggestions

Lead with concrete verbs instead of the noun "guide", e.g. "Handles WeChat Mini Program native authentication in CloudBase: reads injected OPENID/UNIONID, configures `wx.cloud` identity...".

Add common synonyms a user might say (e.g. "小程序 login", "WeChat openid") to broaden trigger-term coverage.

Tighten the "what" so it enumerates the specific actions (configure, read, verify identity) rather than summarizing as a guide.

DimensionReasoningScore

Specificity

Names the domain ("CloudBase WeChat Mini Program native authentication guide") and a few concrete capabilities ("mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior"), but the leading noun-phrase "guide" is not action-verb based and coverage is not comprehensive, matching the anchor listing 1-2 concrete actions.

3 / 5

Completeness

Explicitly answers both "what" (native authentication guide) and "when" ("This skill should be used when users need...") with concrete trigger phrases; the "what" is a terse noun-phrase rather than enumerated actions, so it does not quite reach the level-5 anchor.

4 / 5

Trigger Term Quality

Strong natural keyword coverage — "WeChat Mini Program", "authentication", "mini program identity handling", "OPENID/UNIONID", "`wx.cloud` auth" — terms a user would say; a few synonyms (e.g. 小程序, login) are absent, so it sits just below the comprehensive anchor.

4 / 5

Distinctiveness Conflict Risk

A clear, narrow niche (native WeChat Mini Program auth in CloudBase) with distinct triggers that separate it from sibling auth skills; only minor overlap risk with related CloudBase auth skills keeps it just below 5.

4 / 5

Total

15

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
TencentCloudBase/CloudBase-AI-Toolkit
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.