CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

github

Use the `gh` CLI for issues, pull requests, Actions runs, and GitHub API queries.

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/github/SKILL.md

The canonical home for this skill is github in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A compact, highly actionable reference with copy-paste-ready gh commands and a clear numbered CI-debugging workflow. The main flaw is redundancy: the same four commands appear twice, which hurts both conciseness and overall length.

Suggestions

Consolidate the duplicated commands: keep the "Debugging a CI Failure" sequence and remove the verbatim repeats from the "Pull Requests" section (or vice versa), linking the workflow to the command list once.

Add a brief error-recovery note in the debugging workflow (e.g., what to do when a check name is ambiguous or logs are truncated) to strengthen the feedback loop.

DimensionReasoningScore

Conciseness

The body is mostly lean with concrete commands and no concept explanations, but the four commands in "Pull Requests" (gh pr checks, gh run list, gh run view, gh run view --log-failed) are repeated verbatim in the "Debugging a CI Failure" sequence. This duplication is a clear tightening opportunity, matching anchor 3 rather than 4 where only minor trimming would be needed.

3 / 5

Actionability

Every example is a copy-paste-ready executable command with realistic arguments (e.g., "gh pr checks 55 --repo owner/repo", "gh api repos/owner/repo/pulls/55 --jq '.title, .state, .user.login'", the --json/--jq issue list), covering the common cases of CI debugging, API field selection, and structured output. Not below 5: no pseudocode and no missing key details.

5 / 5

Workflow Clarity

The "Debugging a CI Failure" section gives a clear numbered 4-step sequence with bolded step purposes, each step feeding the next (check status → find run ID → view run → fetch logs). The operations are read-only so destructive-operation validation is not required, but anchor 5 demands explicit validation/error-recovery checkpoints which are absent, so anchor 4 fits best.

4 / 5

Progressive Disclosure

Sections are well-organized (When to Use, Pull Requests, Debugging, API, JSON Output) with no bundle files and no content that clearly belongs in separate files — good structure. It falls short of 5 because the body is ~70 lines (above the under-50 simple-skill guideline) and the command duplication inflates length where consolidation would tighten navigation.

4 / 5

Total

16

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A concise, specific description that clearly states what the skill does with good natural trigger terms. Its main weakness is the complete absence of a "Use when..." trigger clause, which both caps completeness and slightly weakens trigger coverage.

Suggestions

Add an explicit trigger clause, e.g., "Use when the user asks about GitHub issues, pull requests, CI/Actions runs, or needs GitHub API queries."

Include common user phrasings like "CI", "checks", or "workflow runs" alongside "Actions runs" to broaden natural trigger coverage.

Consider naming one or two concrete actions (e.g., "check PR CI status", "view failed-step logs") instead of only listing object areas.

DimensionReasoningScore

Specificity

Names the domain ("`gh` CLI") and enumerates four concrete capability areas ("issues, pull requests, Actions runs, and GitHub API queries"), which matches the anchor for several specific actions with minor gaps. It falls short of 5 because the areas are objects rather than concrete actions (e.g., no "check CI status" or "view failed-step logs") and falls above 3 because coverage goes beyond 1-2 actions.

4 / 5

Completeness

The "what" is clear (use the gh CLI for issues, PRs, Actions runs, and API queries), but there is no "Use when..." clause or equivalent explicit trigger guidance, which caps completeness at 3 per the judging guidelines. It is above 2 because the "what" is concrete, and below 4 because the "when" is entirely absent rather than just imprecise.

3 / 5

Trigger Term Quality

Includes natural phrases users would say such as "issues", "pull requests", "Actions runs", and "GitHub API" — good keyword coverage. Not 5 because common variations like "CI", "checks", "workflow runs", or "CI failure" are missing; not 3 because the terms present are the natural ones users say, not jargon.

4 / 5

Distinctiveness Conflict Risk

The explicit "`gh` CLI" and GitHub scope carve a clear niche, but "issues" and "pull requests" have minor overlap risk with generic git/GitHub-adjacent skills, matching the "mostly distinct; minor overlap risk" anchor rather than the fully distinct anchor 5.

4 / 5

Total

15

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills/skills/github/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.