CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

code-review-and-quality

Conducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human. Use when you need to assess code quality across multiple dimensions before it enters the main branch. Use when asked to review a diff or a pull request, even when the diff is pasted inline.

61

Quality

77%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/code-review-and-quality/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

73%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers highly concrete, well-sequenced review guidance — a severity taxonomy, change-size thresholds, a mutation-testing verification procedure, ready-to-use checklists and templates — with excellent actionability and workflow clarity. Its weaknesses are structural: a ~395-line monolithic file whose only two file references are broken ('../../references/security-checklist.md' and '../../references/performance-checklist.md' do not exist in the bundle), plus repetition across the Rationalizations, Red Flags, and axis sections and some generic checklist content Claude already knows.

Suggestions

Create actual references/security-checklist.md and references/performance-checklist.md files, move the inline Security and Performance checklists into them, and fix the broken '../../references/' paths — they currently point outside the skill directory at files that do not exist.

Deduplicate content repeated across 'Common Rationalizations', 'Red Flags', and the five-axis sections (e.g., the refactor-relocates-complexity and file-size points each appear three times) to cut token usage.

Trim generic review heuristics Claude already knows from the axis bullet lists ('Are SQL queries parameterized?', 'Any N+1 query patterns?'), keeping the skill's non-obvious judgment calls and structural remedies.

DimensionReasoningScore

Conciseness

The body is mostly dense, opinionated guidance that earns its place (severity taxonomy, change-size thresholds, dependency upgrade discipline), but the five-axis bullet lists restate generic review heuristics Claude already knows ('Are SQL queries parameterized?', 'Any N+1 query patterns?', 'avoid nested ternaries'), and the same ideas recur across sections — refactor-relocates-complexity and file-size concerns each appear in the Architecture section, 'Common Rationalizations', 'Red Flags', and the final checklist. This fits anchor 3 ('mostly efficient but includes some unnecessary explanation or could be tightened'); not 2 because there is no padded fluff or concept exposition, but the duplication and generic checklist content exceed the 'minor instances' bar of 4.

3 / 5

Actionability

Fully executable, copy-paste-ready artifacts throughout: the severity prefix table ('Critical:' / 'Nit:' / 'Optional:' / 'FYI'), concrete size thresholds ('~100 lines changed → Good'), a precise mutation-testing procedure ('Invert one condition the change adds (drop a negation, swap && for ||), run the suite, then restore the file from a copy'), a ready review-agent prompt, a fill-in dead-code report template, and a complete review checklist. Specific examples cover the common review cases; no significant gaps for an instruction-only skill.

5 / 5

Workflow Clarity

The Review Process is a clearly sequenced five-step workflow (understand context → review tests first → review implementation → categorize findings → verify the verification) with explicit validation checkpoints: the Step 2 mutation experiment, the Step 5 verification-story check, and the closing Verification checklist. Feedback loops are present ('A mutation that stays green is a finding: name the test case that is missing'), and the dead-code section adds an ask-before-deleting guard. This matches anchor 5 — clear sequence, explicit validation, feedback loops, and checklists for a complex process.

5 / 5

Progressive Disclosure

The skill is a single ~395-line monolithic SKILL.md: no references/, scripts/, or assets/ directories exist, yet the 'See Also' section points to '../../references/security-checklist.md' and '../../references/performance-checklist.md' — broken paths that also escape the skill directory two levels up. Detailed checklists that the skill itself defers to other skills ('For detailed security guidance, see security-and-hardening') remain fully inlined. This fits anchor 2 ('content that clearly belongs in separate files is inlined'); it cannot reach 3 because beyond the inlining, the only file-level references are broken, leaving no working navigation to deeper material.

2 / 5

Total

15

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A solid description with explicit, multiple 'Use when' triggers covering merge gates, diff/PR review, and multi-agent code assessment in third person. Its main weakness is an abstract 'what' — 'multi-axis code review' and 'assess code quality across multiple dimensions' never name the concrete actions or outputs (the five review axes, severity-labeled findings, a review checklist).

Suggestions

Enumerate the concrete actions or outputs in the 'what' clause, e.g. 'Reviews changes for correctness, security, and performance across five axes and produces severity-labeled findings' — this would lift specificity and completeness toward 5.

Add one or two natural trigger phrasings users actually type, such as 'review this PR' or 'is this ready to merge', to broaden trigger coverage.

DimensionReasoningScore

Specificity

The description states the domain ('Conducts multi-axis code review') and one general action ('assess code quality across multiple dimensions'), but never names what the review actually does — the five axes, severity-labeled findings, or a review checklist are absent. This matches anchor 3 ('names domain and 1-2 concrete actions, but not comprehensive'); it is above 2 because reviewing diffs/PRs and pre-merge quality assessment are more than minimal generic action, but below 4 because no several specific concrete actions are enumerated.

3 / 5

Completeness

Both what and when are present: 'Conducts multi-axis code review' (what) plus four explicit trigger clauses — 'Use before merging any change', 'Use when reviewing code written by yourself, another agent, or a human', 'Use when asked to review a diff or a pull request, even when the diff is pasted inline'. Not 5 because the 'what' is abstract — it never enumerates concrete actions or outputs the way the 5-anchor example does ('extract text, fill forms, merge documents'), restating one action twice instead.

4 / 5

Trigger Term Quality

Natural phrases users would say are well covered: 'review a diff or a pull request', 'before merging', 'reviewing code written by yourself, another agent, or a human', 'code quality'. Good keyword coverage matching anchor 4; not 5 because common variations like 'review this PR', 'is this ready to merge', or 'code critique' phrasings are missing, though the coverage is otherwise strong.

4 / 5

Distinctiveness Conflict Risk

Distinct merge-gate triggers ('before merging any change', 'review a diff or a pull request') give it a recognizable niche, matching anchor 4 ('mostly distinct; minor overlap risk with closely related skills'). Not 5 because 'code review' is a broad domain with adjacent skills (security review, code quality, PR review) that share trigger vocabulary.

4 / 5

Total

15

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

addyosmani/agent-skills

Path

skills/code-review-and-quality/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.