CtrlK
BlogDocsLog inGet started
Tessl Logo

audit-context-building

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.

44

Quality

46%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/audit-context-building/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

38%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The skill has a genuinely sound skeleton — a phased bottom-up workflow, a per-function analysis checklist, quantitative quality thresholds, and anti-hallucination rules — but it is undermined by heavy sectional redundancy, incoherent numbering, and references to three detail files (and a subagent) that are absent from the bundle. In its current state the output format it mandates is unreachable, which materially hurts both actionability and navigation.

Suggestions

Create the referenced bundle files (FUNCTION_MICRO_ANALYSIS_EXAMPLE.md, OUTPUT_REQUIREMENTS.md, COMPLETENESS_CHECKLIST.md) — or inline their essential content — since the skill mandates an output format and completion criteria that currently exist nowhere.

Collapse the duplicated sections: merge "1. Purpose" with "2. How This Skill Behaves", and merge "When to Use", "8. Relationship to Other Phases", and "9. Non-Goals" into a single scope section to cut roughly a third of the body.

Fix the section numbering (the "### 5.x" subsections under "## 4. Phase 2" and the duplicate "## 5" heading) and define or remove the undefined 'function-analyzer' subagent reference.

DimensionReasoningScore

Conciseness

The body is noticeably verbose with several redundant sections: "1. Purpose" and "2. How This Skill Behaves" repeat the same behavioral list; "When to Use / Do not use" overlaps "8. Relationship to Other Phases" and "9. Non-Goals"; and the pure-context-only constraint plus First Principles/5 Whys/5 Hows are restated three to four times. This matches anchor 2 (several unnecessary or padded sections) better than anchor 3's 'mostly efficient with some tightening possible'.

2 / 5

Actionability

There is concrete instructional guidance — the per-function checklist (Purpose, Inputs & Assumptions, Outputs & Effects, Block-by-Block Analysis), quantitative thresholds ("Minimum 3 invariants per function", "Minimum 5 assumptions"), and model output phrasing ("Unclear; need to inspect X") — but key details are incomplete: the complete output format and worked example are deferred to OUTPUT_REQUIREMENTS.md and FUNCTION_MICRO_ANALYSIS_EXAMPLE.md, which do not exist in the bundle, and the referenced 'function-analyzer' agent is undefined. This lands on anchor 3 (some concrete guidance but missing key details) rather than anchor 4.

3 / 5

Workflow Clarity

The Phase 1 → Phase 2 → Phase 3 sequence is clearly ordered and a completeness checklist exists as a checkpoint, but the checklist itself lives in a missing file (COMPLETENESS_CHECKLIST.md), and section numbering is incoherent ("## 4. Phase 2" contains subsections "### 5.1"–"### 5.5", followed by "## 5. Phase 3"). Steps are listed with validation gaps, matching anchor 3 rather than anchor 4's 'most checkpoints present'.

3 / 5

Progressive Disclosure

The body cites FUNCTION_MICRO_ANALYSIS_EXAMPLE.md, OUTPUT_REQUIREMENTS.md, and COMPLETENESS_CHECKLIST.md, but no references/, scripts/, or assets/ directories exist — all three references are dangling, so a reader cannot actually reach the material that defines the required output format and completion criteria. The in-body section structure is reasonable, but broken references make the split ineffective, fitting anchor 2 (minimal effective structure) better than anchor 3's 'references present but not clearly signaled'.

2 / 5

Total

10

/

20

Passed

Description

53%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description communicates a clear capability (granular line-by-line analysis for building architectural context) in a distinct niche, but it lacks an explicit 'Use when...' trigger clause and natural synonyms that would let users reliably invoke it. It sits squarely at the middle of the rubric: a clear 'what' with a weakly implied 'when'.

Suggestions

Add an explicit trigger clause, e.g. "Use when preparing for a security audit, code review, or any task requiring deep bottom-up understanding of an unfamiliar codebase before finding bugs."

Include natural synonyms users would actually say — "audit", "code review", "understand the codebase", "architecture review", "threat modeling" — to improve trigger-term coverage.

Mention the deliverable briefly (e.g. per-function analysis with invariants, assumptions, and call-chain maps) to broaden specificity beyond the single 'line-by-line analysis' action.

DimensionReasoningScore

Specificity

The description names the domain ("code analysis") and one to two concrete actions ("line-by-line code analysis", "build deep architectural context"), matching the anchor for 1-2 concrete actions without comprehensive coverage. It does not list several distinct specific actions that would justify a 4, nor is it generic enough to fall to 2.

3 / 5

Completeness

The 'what' is clear ("ultra-granular, line-by-line code analysis to build deep architectural context"), but there is no 'Use when...' clause or equivalent explicit trigger guidance; "before vulnerability or bug finding" only weakly implies timing/sequencing rather than stating when to invoke it. Per the judging guideline, a missing explicit trigger clause caps completeness at 3.

3 / 5

Trigger Term Quality

It contains relevant keywords users might say ("code analysis", "vulnerability", "bug finding") but misses common variations and synonyms such as "audit", "code review", "security review", or "understand the codebase". Coverage exists but is not comprehensive, matching anchor 3 rather than the good coverage of anchor 4.

3 / 5

Distinctiveness Conflict Risk

The phrase "before vulnerability or bug finding" carves out a specific pre-audit context-building niche, making it mostly distinct with only minor overlap risk against closely related code-review/audit skills. It is more specific than anchor 3's example but lacks the bulletproof distinct triggers of anchor 5.

4 / 5

Total

13

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
sickn33/agentic-awesome-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.