CtrlK
BlogDocsLog inGet started
Tessl Logo

github-actions-templates

Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications.

46

Quality

49%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/github-actions-templates/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The skill provides a solid collection of production-ready GitHub Actions workflow templates with concrete, executable YAML examples covering common CI/CD patterns. Its main weaknesses are verbosity (too much inlined that Claude could generate or that could be offloaded to referenced files), lack of error recovery/validation workflows for destructive deployment operations, and unverifiable external file references. The generic instructions section ('Apply relevant best practices') adds little value.

Suggestions

Add explicit validation and rollback steps to deployment workflows (e.g., health check after deploy, rollback command if health check fails, retry logic) to improve workflow clarity for destructive operations.

Move the full YAML templates to the referenced asset files and keep only concise summaries or key snippets inline in SKILL.md to reduce token usage and improve progressive disclosure.

Replace the generic instructions section ('Apply relevant best practices and validate outcomes') with specific, actionable guidance such as 'Ask the user which tech stack and deployment target before selecting a pattern' or 'Verify secrets are configured before generating deployment workflows'.

Remove or significantly trim the 'Workflow Best Practices' list—these are well-known conventions Claude already understands and don't need enumeration.

DimensionReasoningScore

Conciseness

The skill provides many complete YAML examples which are useful but collectively make the file quite long (~250 lines). Some patterns (e.g., the matrix build) are straightforward enough that Claude could generate them without a full template. The best practices list is a set of one-liners Claude already knows. However, the examples themselves are not padded with unnecessary explanations.

3 / 5

Actionability

The YAML workflow examples are concrete, copy-paste ready, and cover common use cases well (testing, Docker builds, K8s deploy, matrix builds, reusable workflows, security scanning). Minor gap: the 'Deploy application' step in the approvals section is a placeholder comment rather than executable code, and the instructions section is vague ('Apply relevant best practices and validate outcomes').

4 / 5

Workflow Clarity

The skill presents individual workflow patterns clearly but lacks explicit validation checkpoints or feedback loops. The Kubernetes deployment pattern includes a 'Verify deployment' step which is good, but there's no guidance on what to do if deployment fails, rollback procedures, or error recovery. For deployment workflows (which are destructive/batch operations), the absence of explicit validation-and-fix loops caps this at 3.

3 / 5

Progressive Disclosure

The skill references several external files (assets/test-workflow.yml, assets/deploy-workflow.yml, references/common-workflows.md, resources/implementation-playbook.md) which suggests good intent for progressive disclosure. However, no bundle files are provided, so these references are unverifiable. The main file itself is quite long with all patterns inlined, and the referenced assets appear to duplicate the inline content rather than offloading it.

3 / 5

Total

13

/

20

Passed

Description

41%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description identifies the domain (GitHub Actions) and lists high-level activities but lacks a 'Use when...' clause, specific trigger terms users would naturally say (like 'CI/CD', 'pipeline', 'continuous integration'), and detailed capability coverage. It is functional but would benefit significantly from explicit trigger guidance and richer keyword coverage to stand out among related skills.

Suggestions

Add a 'Use when...' clause with trigger phrases like 'CI/CD pipeline', 'GitHub Actions workflow', 'continuous integration', 'automated deployment', or 'workflow YAML'.

Include synonyms and related terms users naturally say, such as 'CI/CD', 'pipeline', 'continuous integration', 'continuous deployment', '.github/workflows', and '.yml'.

Expand the capability list with more specific actions, e.g., 'generate workflow YAML files, configure matrix builds, set up caching, define deployment stages, add status badges'.

DimensionReasoningScore

Specificity

Names the domain (GitHub Actions workflows) and lists a few concrete actions ('testing, building, and deploying'), but lacks detail on what specific patterns, configurations, or outputs are provided. 'Production-ready' and 'patterns' are somewhat vague qualifiers.

3 / 5

Completeness

Provides a reasonable 'what' (workflow patterns for testing/building/deploying) but has no 'when' clause or trigger guidance. Per rubric guidelines, a missing 'Use when...' clause caps completeness at 3, and the 'what' is only moderately clear, placing this at 2.

2 / 5

Trigger Term Quality

Includes 'GitHub Actions', 'workflow', 'testing', 'building', 'deploying' which are relevant keywords, but misses natural user phrases like 'CI/CD', 'continuous integration', 'pipeline', '.yml', 'CI pipeline', 'deploy workflow', or 'GitHub CI'.

3 / 5

Distinctiveness Conflict Risk

Specifying 'GitHub Actions' narrows the domain somewhat, but 'testing, building, and deploying' are very broad activities that could overlap with general DevOps, CI/CD, or deployment skills. Without more specific triggers, there's moderate overlap risk.

3 / 5

Total

11

/

20

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.