CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

he-code-review

Review Harness Engineering diffs, PRs, commits, and readiness claims for introduced risk. Use when correctness, validation proof, security posture, traceability, closure safety, or review-thread resolution must be assessed before merge or handoff.

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./Plugins/harness-engineering/skills/he-code-review/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

63%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a lean, well-signaled procedural contract with explicit validation and fail-fast gates, but it is guidance-only with no commands, code, or worked output examples, and its progressive disclosure breaks in practice because every referenced detail file lies outside the bundle under three inconsistent path schemes. Actionability and reference resolution are the main gaps.

Suggestions

Add one worked example of structured output (a severity-ranked finding with file:line, traceability, verdict, and safe_to_continue fields) so the required output shape is concrete rather than only enumerated by field name.

Fix reference paths so they resolve within the skill bundle (e.g., move review-mode-contract.md, review-policy-index.md, and review-loop-patterns.md into the skill's references/ directory and reference them relatively), and unify the three inconsistent path schemes (../../references/, Plugins/harness-engineering/references/, Infrastructure/references/).

Consolidate the repeated "green CI is not readiness" guidance (Procedure step 7, Gotchas, and Anti-Patterns) into a single location to recover tokens.

DimensionReasoningScore

Conciseness

The body is dense and assumes Claude's competence — it never explains what a PR, diff, or CI is, and every section is directive. Not anchor 5 because the "green CI is not readiness" point is repeated across Procedure step 7, Gotchas ("Green CI is not readiness..."), and Anti-Patterns ("Treating green CI as proof of real user behavior"), which could be consolidated. Not anchor 3 because there is no conceptual padding or unnecessary explanation.

4 / 5

Actionability

Concrete elements exist — the enumerated ten-mode list, required output fields (severity-ranked `file:line` findings, `blocked_reason`, `safe_to_continue`, `traceability`), and a numbered procedure — but there are no commands, no executable code, and no worked example of a finding or verdict; the Examples section shows input prompts rather than output shapes. Anchor 4 requires concrete code/commands with only minor gaps, which this lacks, while anchor 2's "minimal concrete guidance" understates the specific mode/evidence/output rules present.

3 / 5

Workflow Clarity

A coherent 13-step sequence (mode selection → stage-context resolution → untrusted-evidence handling → evidence reading → findings → contracts → verdict) with explicit checkpoints: "Fail fast: stop at the first failed gate and do not proceed" and a Failure mode section with recovery ("stop and return the blocker with the smallest recovery step"). Not anchor 5 because steps 9–12 are conditional branches with ambiguous ordering and the validation section is two sentences rather than a gate-by-gate checklist; not anchor 3 because validation and recovery checkpoints are explicit, not implicit.

4 / 5

Progressive Disclosure

The References section signals each external file with an explicit when-to-read condition, which is well-organized signaling. However, scored against the actual bundle, none of the referenced paths resolve: `../../references/skills/he-code-review/review-mode-contract.md`, `../../references/stage-arc-boundary-contract.md`, and all `Plugins/harness-engineering/references/*.md` and `Infrastructure/references/...` paths are absent from the bundle (which contains only contract.yaml, evals.yaml, task-profile.json), and three inconsistent path schemes are mixed. Not anchor 4 because broken, inconsistent reference paths are more than minor organization gaps; not anchor 2 because detail is properly deferred to external files rather than inlined and each reference is clearly signaled.

3 / 5

Total

14

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it explicitly states what the skill does and when to use it, with concrete domain-specific trigger conditions and natural keywords. Its only weaknesses are a generic action verb, some jargon-heavy phrasing, and residual overlap with generic code-review skills.

DimensionReasoningScore

Specificity

"Review Harness Engineering diffs, PRs, commits, and readiness claims for introduced risk" names the domain and several concrete review targets, and the when-clause enumerates six concrete assessment dimensions (correctness, validation proof, security posture, traceability, closure safety, review-thread resolution). It stops short of anchor 5 because the action verb remains a single generic "review...for risk" rather than multiple distinct operations.

4 / 5

Completeness

Both questions are explicitly answered: the what ("Review Harness Engineering diffs, PRs, commits, and readiness claims for introduced risk") and a concrete multi-trigger when ("Use when correctness, validation proof, security posture, traceability, closure safety, or review-thread resolution must be assessed before merge or handoff"), matching the anchor-5 pattern of explicit what-and-when with concrete trigger phrases.

5 / 5

Trigger Term Quality

Natural terms users would say are present: "diffs", "PRs", "commits", "review", "merge", "handoff", "validation". Coverage is good but not comprehensive — common synonyms like "pull request", "code review", or "pre-merge check" are missing and the phrasing leans on domain jargon ("closure safety", "readiness claims").

4 / 5

Distinctiveness Conflict Risk

The "Harness Engineering" qualifier plus niche triggers (traceability, closure safety, review-thread resolution) carve a clear niche with mostly distinct triggers. Not a 5 because "Review diffs, PRs, commits" overlaps with generic code-review skills — a plain "review my PR" request could plausibly trigger this skill over a general reviewer.

4 / 5

Total

17

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository

jscraik/Agent-Skills

Path

Plugins/harness-engineering/skills/he-code-review/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.