CtrlK
BlogDocsLog inGet started
Tessl Logo

skill-code-review

Expert multi-AI code review with inline PR comments — use for thorough quality and security analysis

56

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./.claude/skills/skill-code-review/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

65%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is highly actionable with executable bash throughout, but it is padded with compliance/persona prose, lacks explicit validation feedback loops in its workflows, and keeps large scripts inline while referencing bundle files that do not exist.

Suggestions

Trim the 'MANDATORY COMPLIANCE' prohibition list and the capabilities/persona/example-prompts sections to the essential directive; the rationalized anti-patterns pad the file without adding actionable guidance.

Add an explicit validate→fix→retry loop to stub detection (e.g., re-run detection after fixes until zero BLOCKING issues remain) so the workflow has a real feedback checkpoint rather than only emitting warnings/errors.

Move the long stub-detection and PR-posting scripts into real files under ./scripts/ or ./references/ and link them from the body; the referenced '.claude/references/stub-detection.md' currently does not exist in the bundle.

DimensionReasoningScore

Conciseness

The body provides mostly efficient, actionable content but is padded in places — the 'MANDATORY COMPLIANCE — DO NOT SKIP' prohibition list with rationalized anti-patterns ('Rationalizing a focused audit would be more effective'), the capabilities bullet list, and the persona/example-prompts sections restate context Claude already has, matching 'mostly efficient but includes some unnecessary explanation or could be tightened' rather than the lean level 3.

2 / 3

Actionability

It supplies concrete, copy-paste-ready bash for orchestrate.sh invocations, a full stub-detection loop with grep checks, and a gh-based PR-comment posting script with real commands and variables — fully executable guidance with specific examples, meeting the level-3 anchor over the incomplete/pseudocode level 2.

3 / 3

Workflow Clarity

Sequences are present (Quick Mode grasp→tangle, stub detection Step 1/2/3, PR posting Step 1/2) and there are blocking/non-blocking distinctions, but the stub-detection and review workflows lack an explicit validate→fix→retry feedback loop; the scoring notes cap workflow_clarity at 2 when feedback loops are missing for batch/verification operations, which is the case here.

2 / 3

Progressive Disclosure

Sections are organized and there are references to external paths (orchestrate.sh, agents/personas/code-reviewer.md, .claude/references/stub-detection.md), but no bundle files exist under ./references/, ./scripts/, or ./assets/, and the in-body reference '.claude/references/stub-detection.md' does not exist in the bundle, so large executable blocks sit inline and references are not clearly backed by real bundle files — matching 'some structure but could be better organized; references present but not clearly signaled' rather than the clean one-level-deep level 3.

2 / 3

Total

9

/

12

Passed

Description

65%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is concise and uses natural trigger terms, but it states purpose rather than explicit use-when triggers and names only a subset of the skill's concrete capabilities, leaving it somewhat overlapping with generic code-review skills.

Suggestions

Add an explicit 'Use when...' clause naming user situations, e.g. 'Use when the user asks to review a PR, audit code for security vulnerabilities, check code quality before merge, or assess AI-authored/autonomous code.'

Name a few more concrete actions in the description to raise specificity, e.g. 'detects vulnerabilities, flags stubs/empty implementations, checks TDD evidence, and posts findings as inline PR comments.'

DimensionReasoningScore

Specificity

Quotes 'multi-AI code review', 'inline PR comments', 'quality and security analysis' — it names the domain and a couple of concrete actions, but does not enumerate the broader set of actions the body supports (stub detection, TDD evidence, autonomous-codegen risk), so it matches the 'names domain and some actions, but not comprehensive' anchor rather than the multi-action level 3.

2 / 3

Completeness

It states what the skill does ('Expert multi-AI code review with inline PR comments') but the 'when' is only a purpose clause ('use for thorough quality and security analysis') rather than an explicit 'Use when...' trigger clause naming user situations; per the guidelines a missing explicit trigger clause caps completeness at 2, below the level-3 'clearly answers both what AND when with explicit triggers'.

2 / 3

Trigger Term Quality

Includes natural terms a user would actually say — 'code review', 'PR comments', 'quality and security analysis' — giving good coverage of the phrasings that would surface this skill; it is not jargon-only or generic, so it clears the level-3 bar over the 'some relevant keywords but missing common variations' level 2.

3 / 3

Distinctiveness Conflict Risk

The 'multi-AI' and 'inline PR comments' framing narrows the niche, but the core term 'code review' plus 'quality and security analysis' is a common area many review skills could claim, so it sits at 'somewhat specific but could still overlap with similar skills' rather than the unambiguously distinct level 3.

2 / 3

Total

9

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
nyldn/claude-octopus
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.