CtrlK
BlogDocsLog inGet started
Tessl Logo

create-workflow

Use when: scaffolding a new GitHub Actions CI/CD workflow, adding automation for tests, builds, releases, or security scans

64

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./.github/skills/create-workflow/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

72%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A compact, well-structured skill body with a concrete YAML example, but the workflow lacks explicit validation checkpoints and Step 2 is too vague to be fully actionable.

Suggestions

Replace Step 2's vague 'ensure secrets are available' with a concrete check, e.g. `gh secret list` or a note to confirm required secrets in repo settings.

Add a validation checkpoint before commit, such as running `yamllint` or `actionlint` on the new workflow file.

Fill or contextualize the bracket placeholders ([Workflow Name], [Trigger], [Command]) so the example is closer to copy-paste ready.

DimensionReasoningScore

Conciseness

The body is lean with no padding or explanation of concepts Claude already knows; it stays close to prerequisites, steps, and a concrete YAML example, with only minor placeholder noise.

4 / 5

Actionability

Provides a mostly executable YAML workflow example with pinned action SHAs, but relies on bracket placeholders ([Workflow Name], [Trigger], [Command]) and Step 2 ('Ensure any required secrets...') is a vague hint rather than a concrete command.

4 / 5

Workflow Clarity

Steps are sequenced (create file, verify dependencies, commit) but validation is implicit and weak — Step 2 says to 'ensure' secrets are available without a concrete check, and there is no YAML-lint or dry-run checkpoint before committing a CI change.

3 / 5

Progressive Disclosure

A simple, under-50-line single-purpose skill with no need for external references; sections (Prerequisites, Procedure, steps) are well-organized, satisfying the simple-skill exception for progressive disclosure.

5 / 5

Total

16

/

20

Passed

Description

78%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A well-constructed description that names a concrete domain, lists specific actions, and includes an explicit 'Use when' trigger. The main gap is that the 'when' clause mirrors the 'what' rather than adding separate user-utterance trigger phrases.

Suggestions

Separate the trigger from the capability list, e.g. 'Use when the user asks to add CI, set up GitHub Actions, or automate tests/builds/releases in a repo'.

Add natural synonyms users say, such as 'GitHub Actions', 'GHA', or '.github/workflows', to broaden trigger-term coverage.

DimensionReasoningScore

Specificity

Names the domain ('GitHub Actions CI/CD workflow') and several concrete actions ('scaffolding', 'adding automation for tests, builds, releases, or security scans'), with only minor coverage gaps (e.g., modifying existing workflows is not mentioned).

4 / 5

Completeness

Explicitly states both what the skill does and a 'Use when:' trigger clause, but the 'when' largely restates the actions rather than offering distinct user-mention trigger phrases, so it is not a full 5.

4 / 5

Trigger Term Quality

Good natural keyword coverage ('GitHub Actions CI/CD workflow', 'tests, builds, releases, security scans') that users would plausibly say, though it misses common synonyms/extensions like '.github/workflows' or 'GHA'.

4 / 5

Distinctiveness Conflict Risk

Targets a clear, narrow niche (GitHub Actions CI/CD workflows) with distinct triggers and minimal overlap risk against other skills.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
OpenCTI-Platform/opencti
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.