CtrlK
BlogDocsLog inGet started
Tessl Logo

gating-production-deploys

Use when adding or editing a GitHub Actions workflow that pushes a container image to a registry (ECR/ghcr/Docker Hub via build-push-action) or dispatches a production deploy (a `commit_state_update` repository_dispatch to PostHog/charts). Those run from a single canonical deploy repo, gated by the CD_DEPLOY_ENABLED variable. Does NOT apply to workflows that publish GitHub releases, npm, crates, or Homebrew — those stay on the public repo.

74

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

90%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, highly actionable skill body built around copy-paste gate patterns and real file examples, with good structure and minimal verbosity. The main gap is the absence of an explicit feedback loop around the actionlint validation step for a production-deploy context.

Suggestions

Add a short validate→fix→retry loop after the actionlint step (e.g., 'If actionlint reports the gate is missing or malformed, fix the `if:` and re-lint before merging') to lift workflow_clarity in this destructive/deploy context.

Consider splitting the Patterns block into a short `references/patterns.md` so the SKILL.md overview stays leaner, signalling progressive disclosure more clearly.

State explicitly where CD_DEPLOY_ENABLED must be set (repo/org variable) and how to verify it is set before merging, since the current note only warns of the consequence.

DimensionReasoningScore

Conciseness

Lean and efficient with no padding — it does not explain what GitHub Actions or registries are, and every line (gate condition, patterns, file examples) earns its place. Assumes Claude's competence throughout.

5 / 5

Actionability

Fully executable, copy-paste-ready YAML `if:` conditions covering whole-job, master-keyed, mixed PR+master, push-step, and reusable-input cases, plus concrete real-file examples and a counter-example. Covers the common cases completely.

5 / 5

Workflow Clarity

Clear sequence (identify push/deploy target → apply the matching gate pattern → set CD_DEPLOY_ENABLED before merging → lint with actionlint) with validation present (actionlint + the gate test itself). Held at 4 rather than 5 because an explicit validate→fix→retry feedback loop for the production-deploy context is not spelled out.

4 / 5

Progressive Disclosure

Well-organized into clear sections (Gate these / Don't gate / The gate / Patterns) and self-contained with no nested references, but slightly over 50 lines with patterns that could optionally live in a reference file; no bundle files are present to evaluate against.

4 / 5

Total

18

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A highly specific, well-triggered description that clearly states what it does, when to use it, and what it explicitly excludes. Minor room for more colloquial trigger phrasing, but distinctiveness and completeness are excellent.

DimensionReasoningScore

Specificity

Names multiple concrete actions with specifics — 'pushes a container image to a registry (ECR/ghcr/Docker Hub via build-push-action)' and 'dispatches a production deploy (a commit_state_update repository_dispatch to PostHog/charts)' — giving comprehensive, non-abstract coverage.

5 / 5

Completeness

Explicitly answers both what (container-image push / production deploy dispatch, gated by CD_DEPLOY_ENABLED) and when ('Use when adding or editing...') with concrete triggers and a negative boundary ('Does NOT apply to... GitHub releases, npm, crates, or Homebrew').

5 / 5

Trigger Term Quality

Strong natural keywords a user would say ('adding or editing a GitHub Actions workflow that pushes a container image to a registry', 'production deploy') plus registry synonyms (ECR/ghcr/Docker Hub), though a few common phrasings like 'CD/deploy pipeline' are absent.

4 / 5

Distinctiveness Conflict Risk

Highly specific niche (PostHog/charts dispatch, CD_DEPLOY_ENABLED variable, canonical deploy repo) with an explicit exclusion list, making conflict with other skills minimal.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
PostHog/posthog
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.