Set up, author, tune, and roll out tessl change verify checks for pull requests
65
82%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Passed
No findings from the security scan
Use this playbook when the user wants verifier candidates from the codebase itself, especially hidden conventions that agents may miss without deep local knowledge.
relevant_when or reject the candidate.Adapt these to the repo:
rg -n "from ['\\\"](@|\\.\\.|src|apps|packages)" <target-dir>
rg -n "TODO|FIXME|deprecated|do not|instead|helper|wrapper" <target-dir>
rg -n "generate|generated|do not edit|openapi|types\\.d\\.ts" <target-dir>
rg --files <target-dir> | sed -n '1,200p'Also inspect package exports, route registration, config loading, database access, API clients, and test utilities. These areas often encode invariants that agents break by copying a nearby but wrong pattern.
Good architecture-derived verifiers often enforce:
Avoid rules that require understanding intent across the whole product, runtime state, performance measurements, or subjective design judgment.
Before presenting a verifier as ready:
rg or file
globs.relevant_when if unrelated files match.If you cannot identify both positive and negative examples, label the candidate as exploratory and ask for more evidence before writing verifier JSON.