CtrlK
BlogDocsLog inGet started
Tessl Logo

cs-audit

系统审计。触发:审查系统、扫描 bug/安全/性能/架构债,产出发现清单。不要用于审查单次改动 diff(cs-code-review)、修已知 bug(cs-issue)、实现功能(cs-feat)、行为等价重构(cs-refactor)、沉淀已知经验(cs-keep);这是仓库级只读投查,只发现不定修。

67

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

62%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content has a well-sequenced, checkpoint-validated workflow and concrete per-finding rules, but it leans on a verbose Haskell pseudocode Spec, repeats the core guardrails across several sections, and points to a reference.md that is not bundled. Strong on workflow clarity, moderate on conciseness, actionability, and progressive disclosure.

Suggestions

Consolidate the repeated '只发现不定修 / 不盲扫 / 不凭记忆判架构' guardrails into one '守护规则' section and have Failure Behavior/退出条件 reference it, to cut redundancy and tighten conciseness.

Either ship reference.md in a references/ bundle (so the index/finding templates are real one-level-deep material) or inline the actual index.md/finding-NN.md templates directly in the body so the skill is fully actionable without a missing file.

Compress the Haskell Spec to the essential branch shape and move the full ADT/resume definitions into reference.md, keeping the SKILL.md overview lean.

DimensionReasoningScore

Conciseness

The body is ~232 lines and assumes Claude's competence in most places (no 'what a PDF is' padding), but it repeats the core guardrails several times — '只发现、不定修' / '只发现不定修' appears ~6 times, and the Haskell Spec plus a separate '守护规则' plus 'Failure Behavior' plus '退出条件' all restate the same scope/no-blind-scan/no-ADR guards. Some tightening would remove redundancy without losing clarity. Not 3 because of this repetition; not 1 because nothing explains basic concepts Claude already knows and the guidance is substantive, not padded fluff.

2 / 3

Actionability

Guidance is concrete in places — '每条发现必须记录 文件:行号 + 具体代码片段', per-dimension thresholds ('每种维度最多报 5 条'), and a defined output directory layout — but the main executable artifact is a Haskell pseudocode Spec rather than copy-paste-ready commands, and the index/finding templates live only in an unreferenced-as-existing reference.md. It instructs well but is not fully copy-paste ready. Not 3 because the spec is pseudocode and templates are external; not 1 because it does give specific, executable per-finding and per-dimension rules.

2 / 3

Workflow Clarity

A clear four-phase sequence (范围收敛 → 扫描 → 定级+产出 → 建议下一步) with explicit checkpoints — ConfirmScope / WholeRepoRefused / ArchDriftNoAdr — and a closing checklist ('退出条件') plus failure/reporting behavior. Validation feedback is built in (resume only accepts the matching reason, else Blocked; report blocked state before retrying). Matches the anchor with explicit validation steps and an error-recovery loop; not 2 because checkpoints are explicit, not implicit.

3 / 3

Progressive Disclosure

Structure is reasonable (sections for workflow, dimension matrix, guards, failure behavior) and it references detail files one level deep (reference.md for templates, shared-conventions.md, adrs/). However reference.md is referenced but not present as a bundle file (no references/ dir and no reference.md exists), and the large Haskell Spec + dimension matrix live inline where the index/finding templates arguably belong in reference.md. Some structure but references are not clearly backed and some split-out content is inline. Not 3 because the referenced detail file does not exist and inline content could be better separated; not 1 because there is real sectioning and one-level-deep references rather than a monolithic wall or nested references.

2 / 3

Total

9

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, gives explicit trigger and anti-trigger guidance, and sharply distinguishes cs-audit from adjacent skills. It is written in third person and avoids vague fluff, capping nothing below 3.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — '审查系统、扫描 bug/安全/性能/架构债,产出发现清单' names the scanning of several dimensions and a concrete deliverable (a findings list). It also enumerates precise non-goals (cs-code-review, cs-issue, cs-feat, cs-refactor, cs-keep), which reinforces specific scope rather than vague language. Not below 3 because the actions are concrete and multi-part; clearly above the 'Names domain and some actions' anchor at 2.

3 / 3

Completeness

It answers both 'what' (scans 5 dimensions, produces a severity×nature findings list) and 'when' with an explicit trigger clause ('触发:审查系统…'), plus explicit anti-triggers ('不要用于…'). The 'Use when...' equivalent is present and explicit. Not 2 because both what and when are clearly stated rather than implied.

3 / 3

Trigger Term Quality

Natural user-facing trigger terms are explicit: '触发:审查系统、扫描 bug/安全/性能/架构债' maps directly to a user saying '帮我审查一下系统/扫一下 bug'. It covers the common phrasings users would actually say for an audit. Above 2 because coverage of natural terms is broad, not just a few relevant keywords.

3 / 3

Distinctiveness Conflict Risk

It carves a clear niche — '仓库级只读投查,只发现不定修' — and explicitly distinguishes it from five sibling skills (cs-code-review, cs-issue, cs-feat, cs-refactor, cs-keep), so it is unlikely to trigger for the wrong skill. Distinct triggers and anti-triggers make conflict risk low; above 2.

3 / 3

Total

12

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
codestable/CodeStable
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.