CtrlK
BlogDocsLog inGet started
Tessl Logo

code-review

Perform thorough code reviews with security, performance, and maintainability analysis. Use when user asks to review code, check for bugs, or audit a codebase.

64

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/code-review/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-structured, actionable review kit with concrete commands, code examples, and a clear workflow. Its main weaknesses are a padded opener and a patterns section that re-explains basic security concepts Claude already knows, plus the lack of explicit feedback loops in the workflow.

Suggestions

Remove the "You now have expertise..." role-play opener and trim or relocate the "Common Patterns to Flag" section, since Claude already knows SQL injection, eval risks, and mutable defaults.

Add an explicit validation step to the workflow (e.g. re-scan after proposing fixes, or confirm findings against tests before writing the verdict) to introduce a feedback loop.

Provide concrete detection commands for the abstract checklist items, such as a grep/AST pattern for N+1 queries or a tool for dead-code detection, to close the actionability gaps.

DimensionReasoningScore

Conciseness

The checklists and command blocks are terse and earn their tokens, but the opener "You now have expertise in conducting comprehensive code reviews" is role-play filler and the "Common Patterns to Flag" section re-teaches concepts Claude already knows (SQL injection, eval, mutable defaults, prototype pollution).

3 / 5

Actionability

Quotes concrete tooling (`npm audit`, `pip-audit`, `cargo audit`, `radon cc . -a`, targeted grep patterns) and copy-paste Bad/Good code examples plus a fill-in output template; minor gaps remain because some checklist categories (logic errors, N+1 queries) offer guidance but no specific detection command.

4 / 5

Workflow Clarity

The "Review Workflow" lists a clear 7-step sequence and the five detailed checklists serve as validation structure for the complex process; it is not a 5 because there are no explicit validate-then-fix feedback loops in the workflow itself, though code review is non-destructive so the cap at 3 does not apply.

4 / 5

Progressive Disclosure

No bundle files exist and the single ~150-line file is well-organized with clear section headers and easy navigation; it is not a 5 because everything is inlined with no overview-to-detail layering and the file exceeds the under-50-line simple-skill threshold, yet structure is solid enough to clear a 4.

4 / 5

Total

15

/

20

Passed

Description

82%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description cleanly states what the skill does and when to use it with natural trigger phrases, scoring well on completeness and distinctiveness. Specificity is the weakest area because it leans on analysis categories and a filler word rather than enumerating concrete review actions.

Suggestions

Drop the filler word "thorough" and replace category labels with concrete actions, e.g. "Find security vulnerabilities, performance bottlenecks, and maintainability issues in code".

Add common synonyms to the trigger clause such as "code review", "find bugs or issues", or "review a pull request" to broaden natural-term coverage.

DimensionReasoningScore

Specificity

Quotes "Perform thorough code reviews with security, performance, and maintainability analysis" — names the domain plus three analysis dimensions, but "thorough" is mild filler and the listed dimensions are categories rather than discrete concrete actions, leaving coverage incomplete (testing/correctness absent).

3 / 5

Completeness

Quotes "Perform thorough code reviews with security, performance, and maintainability analysis. Use when user asks to review code, check for bugs, or audit a codebase." — explicitly answers both what and when with concrete trigger phrases, matching the anchor 5 example pattern.

5 / 5

Trigger Term Quality

Quotes "review code, check for bugs, or audit a codebase" — natural phrases a user would say, with good coverage; a few common synonyms ("code review", "find issues", "PR review") are missing so it is not a 5.

4 / 5

Distinctiveness Conflict Risk

Code review with security/performance/maintainability framing and triggers like "audit a codebase" carves a clear niche with minimal overlap risk against other skills.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
shareAI-lab/learn-claude-code
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.