CtrlK
BlogDocsLog inGet started
Tessl Logo

code-review

Reviews code diffs and files for security vulnerabilities (OWASP Top 10), error handling, complexity, naming conventions, and performance issues. Use when the user asks to review a PR, pull request, diff, merge request, or code changes.

76

Quality

93%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

87%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is concise, actionable, and well-organized for a simple read-only review skill, with a concrete code example and a clear output template. The main gap is workflow_clarity: the review sequence lacks any explicit validation/checkpoint step to confirm findings before reporting.

Suggestions

Add a validation checkpoint to the workflow, e.g. an 8th step: 'Re-verify each finding against the actual line to confirm it is real before reporting', lifting workflow_clarity to a 3.

Include a one-line guardrail on severity assignment (e.g., how to decide CRITICAL vs WARNING vs SUGGESTION) so findings are consistently categorized.

DimensionReasoningScore

Conciseness

A lean ~45-line body with a numbered instruction list, a compact output template, and one example; it explains nothing Claude already knows, matching the score-3 'every token earns its place' anchor.

3 / 3

Actionability

Provides an explicit 7-step checklist, a concrete output-format template, and a copy-paste-ready before/after Python example for SQL injection, matching the score-3 'fully executable; copy-paste ready' anchor.

3 / 3

Workflow Clarity

The 7-step review sequence is clearly ordered, but there are no validation checkpoints (e.g., 're-verify each finding references a real line') or feedback loops, matching the score-2 'sequence present but checkpoints missing or implicit' anchor rather than score-3's explicit-validation requirement.

2 / 3

Progressive Disclosure

A single well-organized file under 50 lines with clear sections (Instructions, Output Format, Example Finding) and no bundle files, matching the simple-skill allowance for a score-3 progressive_disclosure.

3 / 3

Total

11

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, comprehensive, and uses an explicit 'Use when...' trigger clause covering natural user phrasing with good variation coverage. It cleanly answers both what the skill does and when to use it, in third-person voice with no padding.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions (security/OWASP, error handling, complexity, naming conventions, performance), matching the score-3 anchor rather than the score-2 'some actions' anchor.

3 / 3

Completeness

Explicitly states both what it does ('Reviews code diffs and files for...') and when to use it ('Use when the user asks to review a PR...'), matching the score-3 anchor; it is not the score-2 case where 'when' is missing or only implied.

3 / 3

Trigger Term Quality

Covers natural user phrasing — 'PR, pull request, diff, merge request, or code changes' — with common variations, matching the score-3 'good coverage of natural terms' anchor rather than score-2's partial coverage.

3 / 3

Distinctiveness Conflict Risk

The diff/PR/merge-request triggers carve a clear code-review niche unlikely to conflict with unrelated skills, matching the score-3 anchor rather than the score-2 'could still overlap' case.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
open-gitagent/opengap
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.