CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

nic-code-review

Workflow, guardrails, and output format for reviewing NIC pull requests. Use when reviewing a PR locally (Copilot Chat, Claude, or other agent), when running the pr-review prompt, or when acting as the GitHub Copilot Code Review bot. Delegates codebase-specific detail to the domain skills (nic-structure, nic-add-feature, nic-add-policy, nic-docker-images, nic-ci-pipelines, nic-testing) rather than duplicating them.

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An exceptionally actionable and well-sequenced review workflow with strong verification checkpoints and settled verdicts. Its two weaknesses are token-efficiency (the same rules are repeated across the Fixed verdicts, completeness gate, and dimension sections) and partial self-contradiction on progressive disclosure, where domain detail the skill says belongs in sibling skills is inlined anyway.

Suggestions

Consolidate the repeated rules: the Plus-only/OSS-template, values.schema.json, snapshot-regeneration, and types.go-codegen rules each appear in 3-4 sections. State each once in Fixed verdicts and have the completeness gate and dimension sections reference that table by row rather than restating the severity and rationale.

Move domain-specific verdict rows (chart values.schema.json semantics, workflow github.repository gating, Docker --secret handling, pytest strict-markers) into the domain skills they name (nic-add-feature, nic-ci-pipelines, nic-docker-images, nic-testing) and keep only the cross-cutting verdicts here, honoring the file's own rule that codebase-specific detail lives in the domain skills.

Trim or merge overlapping verification guidance: 'Verify before flagging', 'Verify against upstream NGINX', 'Confidence downgrades', and 'Common AI false-positive patterns' all encode the same check-before-you-claim principle; a single section with the two tables would remove redundant framing.

DimensionReasoningScore

Conciseness

The body teaches no concepts Claude already knows and is dense with repo-specific rules, but the same verdicts are restated across multiple sections: the Plus-only/OSS-template rule appears in four places (upstream section, Fixed verdicts, completeness gate, Tests), and the values.schema.json, snapshot-regeneration, and types.go-codegen rules each appear three or more times. Consolidating these repeated rules would trim an estimated 20-30% of tokens without losing information.

3 / 5

Actionability

Fully concrete throughout: copy-paste-ready commands ("git worktree add --detach /tmp/pr-<n> FETCH_HEAD", "make update-codegen", "GH_PAGER=cat gh pr view <n>"), exact file paths and symbol names (containsDangerousChars(), values.schema.json, pyproject.toml markers), settled per-situation verdicts, and a filled-in output format template.

5 / 5

Workflow Clarity

An 11-step ordered workflow with explicit validation checkpoints ("Run the completeness gate below before writing anything", "Verify claims before commenting"), feedback loops for error recovery (drop unverifiable findings, re-run generators and diff, confidence downgrades), a pre-output completeness checklist, and a cleanup step that verifies git status matches its pre-review state.

5 / 5

Progressive Disclosure

Good orchestration structure: the change-type classification table and per-dimension callouts clearly signal which domain skill to load, and references are one level deep. It falls short of 5 because, despite its own stated policy of delegating codebase detail, it inlines substantial domain-specific verdict rows (chart schema, CI gating, Docker credentials, pytest markers) that belong in the skills it delegates to, making the file longer than an overview role demands.

4 / 5

Total

17

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it covers what, when, and how it relates to sibling skills in third person with concrete trigger contexts. Its only weakness is that the capability list is stated at the artifact level (workflow/guardrails/output format) rather than enumerating the concrete review actions it performs.

DimensionReasoningScore

Specificity

Names the domain ("reviewing NIC pull requests") and several specific deliverables ("Workflow, guardrails, and output format") plus an explicit delegation behavior to six named domain skills. Not a 5 because the capabilities are stated as artifacts rather than concrete review actions (e.g., what dimensions or verdicts it covers), and not a 3 because it goes beyond 1-2 actions.

4 / 5

Completeness

Explicitly answers both questions with concrete trigger phrases: what ("Workflow, guardrails, and output format for reviewing NIC pull requests") and when ("Use when reviewing a PR locally..., when running the pr-review prompt, or when acting as the GitHub Copilot Code Review bot"). Written in third person with no first/second-person voice.

5 / 5

Trigger Term Quality

Includes natural phrases users would say: "reviewing a PR locally", "running the pr-review prompt", "Copilot Chat", "GitHub Copilot Code Review bot". A few common variations are missing from the description itself ("review the diff", "review my branch", "code review"), which keeps it below the comprehensive-synonym coverage of a 5.

4 / 5

Distinctiveness Conflict Risk

Clear niche (NIC PR review) with distinct, tool-specific triggers (pr-review prompt, Copilot Code Review bot) that few other skills would match. It also explicitly names and differentiates the six sibling domain skills it complements, minimizing intra-family conflict.

5 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 2 missing, 1 suspicious

Warning

Total

15

/

16

Passed

Repository

nginx/kubernetes-ingress

Path

.github/skills/nic-code-review/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.