CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

gcp-cloud-run

When to use: ['Web applications and APIs', 'Need any runtime or library', 'Complex services with multiple endpoints', 'Stateless containerized workloads']

Quality

55%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/gcp-cloud-run/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is genuinely actionable — complete Dockerfiles, server code, CI pipeline, and deploy commands with useful anti-patterns — but it is marred by broken/mismatched code fences, a placeholder Sharp Edges table, duplicated trigger lists, a meaningless 'When to Use' section, and no deploy verification steps. Fixing the structural defects would raise most dimensions by a full point.

Suggestions

Fix the mismatched code fences (e.g. the stray '```javascript' before '```dockerfile' and the fence enclosing the '## 1. Enable Startup CPU Boost' headings) — they corrupt rendering and make the deploy steps ambiguous to extract.

Replace the placeholder Sharp Edges table: every row currently has 'Issue' in the Issue column and a '## heading' fragment in the Solution column; fill in real issue names (e.g. '/tmp counts against memory', 'concurrency starvation') and concrete gcloud flags or config as solutions.

Delete the filler 'When to Use' section ('This skill is applicable to execute the workflow or actions described in the overview.') and the per-pattern duplicated 'When to use' lists, and add an explicit deploy workflow ending with a verification step (curl the /health endpoint on the deployed service URL before declaring success).

DimensionReasoningScore

Conciseness

The bulk is dense, low-padding code (Dockerfile, Express server, cloudbuild.yaml, deploy commands) with almost no concept explanation, but tokens are wasted on duplicated 'When to use' lists repeated in every pattern, a filler 'When to Use' section ('This skill is applicable to execute the workflow or actions described in the overview'), and broken scaffolding fragments. This sits between anchor 4 ('efficient; minor instances') and anchor 3 ('mostly efficient but some unnecessary'), landing at 3 given the repeated and filler content.

3 / 5

Actionability

The patterns supply mostly executable, copy-paste-ready material: a complete multi-stage Dockerfile, a working Express app with health check and SIGTERM handling, a full cloudbuild.yaml, and concrete gcloud deploy commands with flags. Minor gaps keep it below anchor 5: the lazy-init example uses a placeholder 'client.query({...})', getItem/processMessage are undefined, and mangled code fences ('```javascript' immediately followed by '```dockerfile') make some blocks ambiguous to extract.

4 / 5

Workflow Clarity

A rough build→push→deploy sequence exists implicitly via cloudbuild.yaml steps, but there is no explicit step-by-step deploy workflow and no validation or verification checkpoints (e.g. hitting /health after deploy, confirming the service URL). Anchor 3 ('sequence present but checkpoints missing or implicit') fits; it cannot score 4 because checkpoints are absent entirely, not just minor gaps.

3 / 5

Progressive Disclosure

The body has real section structure (Patterns, Anti-Patterns, Sharp Edges), but navigation is undermined: the Sharp Edges table is a placeholder ('Issue | high | ## Set appropriate concurrency' — every Issue column literally reads 'Issue' and solutions are heading fragments), broken fences swallow headings like '## 1. Enable Startup CPU Boost' into code blocks, and ~285 lines of pattern catalog could arguably live in reference files. This matches anchor 3 ('some structure but could be better organized') better than anchor 4.

3 / 5

Total

13

/

20

Passed

Description

32%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a bare trigger list with no statement of what the skill does, no mention of the product it targets, and overly generic trigger phrases. It fails the 'what AND when' completeness requirement and has high conflict risk with other container/deployment skills.

Suggestions

Lead with a concrete 'what' clause naming the product, e.g. 'Deploy containerized web services and event-driven functions to Google Cloud Run: Dockerfiles, Cloud Build pipelines, and gcloud deploy commands. Use when deploying to Cloud Run, GCP serverless containers, or handling Cloud Run cold starts, concurrency, or /tmp memory limits.'

Replace generic triggers like 'Need any runtime or library' with specific natural phrases users would actually say ('deploy to Cloud Run', 'GCP serverless', 'container cold start'), both to improve trigger quality and to reduce conflict with other container-platform skills.

Include the distinctive product name ('Cloud Run', 'GCP') in the description itself rather than relying on the skill's name field, so the description is self-contained and distinguishable from AWS/Fargate/Kubernetes alternatives.

DimensionReasoningScore

Specificity

The description contains no concrete actions or verbs at all — it is only a 'When to use' list ('Web applications and APIs', 'Need any runtime or library', 'Complex services with multiple endpoints', 'Stateless containerized workloads'). The domain is only loosely implied via 'Stateless containerized workloads'; nothing like 'deploy', 'build', or 'configure' is stated, matching anchor 2 ('names the domain but actions are minimal or generic') rather than anchor 1 only because the use-case list does convey the deployment domain.

2 / 5

Completeness

Only the 'when' is present ('When to use: [...]') with no 'what' — the description never states what the skill does. This is exactly anchor 2 ('only when is present without what', example 'Use when working with documents'). It cannot reach 3 because the 'what' is missing entirely, not merely weakly implied.

2 / 5

Trigger Term Quality

Phrases like 'Stateless containerized workloads', 'Web applications and APIs', and 'Complex services with multiple endpoints' are relevant keywords, but the most natural terms a user would say — 'Cloud Run', 'GCP', 'deploy', 'serverless', 'container' — are absent, matching anchor 3 ('some relevant keywords but missing common variations or synonyms') and not anchor 4's 'good keyword coverage'.

3 / 5

Distinctiveness Conflict Risk

Triggers like 'Need any runtime or library' and 'Web applications and APIs' are extremely broad and would equally match AWS Lambda, Fargate, ECS, Kubernetes, or App Engine skills; the word 'Cloud Run' or 'GCP' never appears, so overlap risk with many similar deployment skills is high — anchor 2.

2 / 5

Total

9

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/gcp-cloud-run/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.