CtrlK
BlogDocsLog inGet started
Tessl Logo

auth-wechat-miniprogram

CloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic.

60

Quality

71%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./config/.claude/skills/auth-wechat-miniprogram/SKILL.md

The canonical home for this skill is auth-wechat-miniprogram in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

60%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured skill that correctly offloads detailed scenarios to a one-level reference, but the body carries notable redundancy between its activation/usage sections and lacks in-body executable examples.

Suggestions

Collapse the 'Activation Contract' and 'When to use this skill' sections into a single decision block to remove the duplicate 'Do NOT use for' lists and repeated automatic-auth statements.

Include one minimal in-body code snippet (e.g. cloud.getWXContext() identity extraction) so the skill is actionable without forcing a reference read for the common case.

Trim 'Core concepts' to only what is not already covered in extended-guide.md to reduce token cost.

DimensionReasoningScore

Conciseness

Mostly efficient, but the 'Activation Contract' and later 'When to use this skill' sections duplicate each other (two 'Do NOT use for' lists and repeated 'native and automatic' points), and 'Core concepts' restates material already covered in the extended guide.

3 / 5

Actionability

All executable code lives in the referenced extended-guide.md; the body itself offers high-level API-shape guidance ('Use wx-server-sdk', 'Use wx.cloud') and pointers to scenarios rather than copy-ready examples, leaving concrete detail incomplete.

3 / 5

Workflow Clarity

The 'How to use this skill' section gives a clear numbered 5-step sequence with a confirm-environment checkpoint; not a destructive/batch operation so the validation cap does not apply, but error-recovery checkpoints are absent.

4 / 5

Progressive Disclosure

The body is a well-sectioned overview pointing one level deep to a clearly signaled extended-guide.md with a reference index; minor organization gaps stem from the duplicated decision-guidance sections.

4 / 5

Total

14

/

20

Passed

Description

82%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description with explicit what-and-when guidance and clear conflict boundaries. Its only weakness is modest specificity of concrete actions and a few missing synonyms.

DimensionReasoningScore

Specificity

It names the domain (CloudBase WeChat Mini Program auth) and a couple of concrete targets ('OPENID/UNIONID access', 'wx.cloud auth behavior'), but does not enumerate multiple distinct actions like a 4-5 would; it sits at the 'names domain and 1-2 concrete actions' anchor.

3 / 5

Completeness

It explicitly states both what it is ('CloudBase WeChat Mini Program native authentication guide') and when to use it ('This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or wx.cloud auth behavior...') with concrete trigger phrases, matching the top anchor.

5 / 5

Trigger Term Quality

Strong natural terms a developer would actually say ('WeChat Mini Program', 'authentication', 'OPENID/UNIONID', 'wx.cloud', 'login'), but a few common variations/synonyms (e.g. '微信小程序', '微信登录') are missing, keeping it just below comprehensive.

4 / 5

Distinctiveness Conflict Risk

The niche is sharply defined ('native and automatic' login in CloudBase mini programs) with triggers unlikely to fire for sibling auth skills, giving minimal conflict risk.

5 / 5

Total

17

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
TencentCloudBase/CloudBase-AI-Toolkit
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.