CtrlK
BlogDocsLog inGet started
Tessl Logo

cloudbase-code-review

Code review and validation for CloudBase projects. After writing code for Web / miniprogram / CloudRun / cloud-function projects, call this skill to check for known pitfalls — auth guard misuse, missing database tables, RLS misconfiguration, storage domain setup, and SDK API misuse. Supports automated lint scripts (regex-based) + LLM semantic review.

67

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is cloudbase-code-review in TencentCloudBase/CloudBase-AI-Toolkit

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, mostly lean body that delegates detail to verified reference files and gives concrete, executable lint guidance. Main improvements are removing the duplicated lint-setup instruction and adding an explicit validate-fix-retry feedback loop.

Suggestions

De-duplicate the lint setup: describe it once (e.g., in 'How it works') and reference it from Quick start rather than repeating the full copy-and-run instruction.

Add an explicit feedback loop for findings (e.g., lint → review flagged issues → fix → re-run lint until clean) to strengthen validation checkpoints.

Make the Quick start steps concrete commands instead of comment lines so they are copy-paste ready.

DimensionReasoningScore

Conciseness

Mostly lean and well-organized with a compact table and templates, but the lint-setup instruction ('copy it to a temporary cloudbase-lint.mjs, then run node ...') is repeated in both the 'How it works' table and the Quick start block, which could be trimmed.

4 / 5

Actionability

Gives concrete, executable guidance — specific reference paths, a runnable lint command with arguments, and a rule-file template — with only minor gaps (the Quick start steps are comment-style rather than copy-paste commands).

4 / 5

Workflow Clarity

Clear two-layer sequence (read rules → LLM inspect) with a 'before claiming done' checkpoint and a deterministic lint layer acting as validation; lacks an explicit fix-and-revalidate feedback loop, leaving a minor gap.

4 / 5

Progressive Disclosure

SKILL.md is a clear overview pointing one level deep to real, well-signaled references (RULES_INDEX.md, lint-rules/README.md, and the verified rule files listed in the Reference index), with content appropriately split for easy navigation.

5 / 5

Total

17

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-scoped description that clearly states what it does and when to invoke it, with concrete CloudBase-specific trigger terms. The only weakness is the second-person 'call this skill' phrasing rather than third person.

Suggestions

Rewrite in third person to avoid the second-person imperative (e.g., 'Performs code review and validation for CloudBase projects; invoke after implementing ...').

Add a few more natural trigger variations users might say, such as 'review my CloudBase code' or file/extension hints, to broaden keyword coverage.

DimensionReasoningScore

Specificity

Names the CloudBase domain and lists several concrete checks — 'auth guard misuse, missing database tables, RLS misconfiguration, storage domain setup, and SDK API misuse' plus 'lint scripts (regex-based) + LLM semantic review' — approaching comprehensive coverage; reduced by one for the second-person imperative 'call this skill'.

4 / 5

Completeness

Explicitly answers both what ('Code review and validation... check for known pitfalls') and when ('After writing code for ... call this skill') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Good natural keyword coverage — 'code review', 'CloudBase', 'Web / miniprogram / CloudRun / cloud-function', 'RLS', 'auth guard', 'storage domain' — users would say these; a few common variations or file extensions are absent.

4 / 5

Distinctiveness Conflict Risk

Scoped tightly to CloudBase projects with platform-specific triggers (CloudRun, miniprogram, RLS), giving a clear niche with minimal overlap risk.

5 / 5

Total

18

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

relative_links

Relative link issues: 10 deeper-than-1-level

Warning

referenced_paths_exist

Referenced path issues: 16 deeper-than-1-level

Warning

Total

13

/

16

Passed

Repository
TencentCloudBase/CloudBase-AI-Toolkit
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.