CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

code-review

Toolkit for performing structured code reviews. Covers identifying bugs, security issues, performance problems, and style violations. Use when asked to review code changes, pull requests, or individual files.

Quality

76%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./tests/e2e/shared/testdata/code-review/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A lean, well-organized instruction-only skill whose structure (decision tree, checklist, severity taxonomy) gives Claude a usable review framework. Its weakness is substance: no executable specifics (commands, output format, severity definitions, finding-report template) and redundant restatement of generic review advice across three sections, leaving the workflow without verification or reporting checkpoints.

Suggestions

Add concrete executable steps to the workflow: how to obtain the diff or file contents (e.g., a command or tool invocation), and a defined output/report format showing how findings should be grouped and presented by severity.

Define the severity levels (critical, high, medium, suggestion) with one-line criteria each so 'flag as critical' is an actionable rule rather than a judgment call, and consolidate the severity mapping that currently appears in both the decision tree and Guidelines.

Remove the redundant intro (which restates the description) and the generic advice lines Claude already knows, and add a verification step to the workflow (e.g., re-checking each flagged finding against the actual diff before reporting).

DimensionReasoningScore

Conciseness

The body is short (~40 lines) and not padded, but it re-states the description in the intro, duplicates the severity taxonomy in both the decision tree ("Security issues → Flag as critical") and the Guidelines ("Group findings by severity: critical, high, medium, suggestion"), and offers review wisdom Claude already knows ("Always explain *why* something is a problem"), matching the 3 anchor 'mostly efficient but includes some unnecessary explanation or could be tightened'. It is not the 4 anchor because the redundancy between the decision tree, checklist, and guidelines is more than a minor trim.

3 / 5

Actionability

Some concrete guidance exists — a severity mapping ("Security issues → Flag as critical"), a five-item checklist, and the instruction "When suggesting a fix, show a concrete code snippet" — but there are no commands (e.g., how to obtain the diff), no output/report format template, and the checklist items are high-level questions ("Are inputs validated?") rather than executable checks, matching the 3 anchor 'some concrete guidance but incomplete; missing key details'. It does not reach the 4 anchor's 'concrete code or commands with minor gaps', and it sits above the 2 anchor because the decision tree and severity rules do give real structure.

3 / 5

Workflow Clarity

The decision tree lays out a clear sequence for both paths ("Read the diff, then review file-by-file" → flag by severity; single-file → "Check imports" → "Verify error handling"), but checkpoints are missing: there is no step for acquiring the diff, no verification of findings before reporting, and no final reporting/synthesis step, matching the 3 anchor 'sequence present but checkpoints missing or implicit'. The 4 anchor requires most checkpoints present, which this lacks; the simple-skill 5 exception does not apply since code review is a multi-step process, though the no-validation cap for destructive/batch operations is not triggered as review is read-only.

3 / 5

Progressive Disclosure

The skill is under 50 lines with no bundle files (references/, scripts/, assets/ do not exist) and no external references are needed, so per the rubric's guideline for such skills it scores 5 with well-organized sections — which it has (Decision Tree, Review Checklist, Examples, Guidelines, all clearly headed, no inlined content that belongs in separate files).

5 / 5

Total

14

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with an explicit 'Use when...' trigger clause and a concrete enumeration of the four review dimensions it covers. Third-person voice is used correctly. The only improvements are cosmetic: adding common synonyms ('PR', 'diff', 'code review') to the trigger list and tightening the generic 'Toolkit' opener.

DimensionReasoningScore

Specificity

The description lists several specific review actions — "identifying bugs, security issues, performance problems, and style violations" — but these are four objects of a single 'identifying' verb under a generic "Toolkit for performing structured code reviews" lead, so coverage is good yet not the multi-verb comprehensive action list of the 5 anchor. It clearly exceeds the 3 anchor ('1-2 concrete actions') since four distinct issue categories are named.

4 / 5

Completeness

Both halves are explicit: what it does ("structured code reviews... identifying bugs, security issues, performance problems, and style violations") and when to use it ("Use when asked to review code changes, pull requests, or individual files"), matching the 5 anchor's 'clearly and explicitly answers both what AND when with concrete trigger phrases'. The 4 anchor ('when' could be more explicit or specific) does not apply — the trigger clause names three concrete invocation types.

5 / 5

Trigger Term Quality

"review code changes, pull requests, or individual files" includes natural phrases users would say ('review', 'code', 'pull requests'), matching the 'good keyword coverage; a few natural terms missing' anchor — synonyms like 'PR', 'diff', or 'code review' itself are absent. It is well above the 3 anchor ('Works with PDF files'-level single keyword) because multiple natural trigger phrases are present, but below the 5 anchor's synonym/extension-level comprehensiveness.

4 / 5

Distinctiveness Conflict Risk

"structured code reviews" with triggers around code changes and pull requests carves a mostly distinct niche, but 'review code' is a broad domain with plausible minor overlap against closely related skills (e.g., security-review or general review skills), matching the 4 anchor 'mostly distinct; minor overlap risk'. It is more specific than the 3 anchor's generic 'works with X files' phrasing but lacks the tight niche focus of the 5 anchor's PDF-extraction example.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

agntcy/dir

Path

tests/e2e/shared/testdata/code-review/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.