CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

github-actions-templates

Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications.

Quality

66%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/github-actions-templates/SKILL.md

The canonical home for this skill is github-actions-templates in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

53%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A genuinely actionable template library whose body is undermined by broken progressive disclosure — every referenced file is missing while the content is simultaneously inlined — plus filler sections and a placeholder deploy pattern. Fixing the file bundle and pruning boilerplate would move it to good quickly.

Suggestions

Ship the referenced bundle files (assets/*.yml, references/common-workflows.md) and keep only one representative pattern inline in SKILL.md, or delete the 'Reference:' pointers if the files will not exist.

Cut the 'Do not use this skill when', 'Instructions', and 'Purpose' boilerplate sections; they add tokens without actionable content.

Replace the placeholder deploy step ('# Deployment commands here') with a real deployment example, and add an explicit validation step such as running actionlint or a workflow dry-run before committing.

DimensionReasoningScore

Conciseness

The YAML templates are legitimately the skill's payload, but there is real waste: a filler 'Instructions' section ("Clarify goals, constraints, and required inputs", "Apply relevant best practices and validate outcomes"), a boilerplate 'Do not use this skill when' section ("The task is unrelated to github actions templates"), a 'Purpose' section duplicating the intro, and ~300 lines of full workflows inlined that the body itself claims live in assets files. Mostly on-topic but includes unnecessary sections and duplication, matching anchor 3; not 4 because the filler sections and inline/asset duplication are more than minor trimmings.

3 / 5

Actionability

The patterns are complete, copy-paste-ready YAML with pinned action versions, concrete secrets, and specific commands (e.g. the docker build/push pattern with metadata-action tagging and GHA caching). Minor gaps keep it from 5: the production deploy pattern is a placeholder ("# Deployment commands here"), the K8s pattern hardcodes values like 'production-cluster' and 'deployment/my-app', and the 'Workflow Best Practices' list is abstract advice.

4 / 5

Workflow Clarity

There is structure for choosing among patterns ('Use this skill when' section, patterns organized by use case) and some templates embed verification (kubectl rollout status, kubectl get pods, upload coverage), but the skill-level 'Instructions' give only a vague sequence with no concrete validation checkpoints (e.g. actionlint/dry-run before committing a generated workflow). Sequence present with validation gaps matches anchor 3 rather than 4, where most checkpoints would be explicit.

3 / 5

Progressive Disclosure

The body references assets/test-workflow.yml, assets/deploy-workflow.yml, assets/matrix-build.yml, references/common-workflows.md, and resources/implementation-playbook.md — none of which exist in the bundle (no assets/, references/, or scripts/ directories), so every pointer is a dead end and the 'resources/' path even conflicts with the 'assets/' convention used elsewhere. Meanwhile the full template content that belongs in those files is inlined as ~300 lines of YAML. This matches anchor 2 ('content that clearly belongs in separate files is inlined; or references are buried') — the section headers and explicit 'Reference:' callouts are the only thing keeping it above anchor 1's structureless monolith.

2 / 5

Total

12

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A solid, specific description with good natural trigger terms and a distinct GitHub Actions niche, held back by the complete absence of an explicit 'Use when...' clause. Adding trigger guidance and CI/CD synonyms would lift it substantially.

Suggestions

Append an explicit trigger clause, e.g. 'Use when creating or editing GitHub Actions workflows, CI/CD pipelines, or files in .github/workflows'.

Add natural synonyms users say: 'CI/CD', 'continuous integration', 'pipeline', '.github/workflows', 'YAML'.

Mention distinctive capabilities like matrix builds, security scans, and reusable workflows to broaden trigger coverage and distinguish it from generic CI/CD skills.

DimensionReasoningScore

Specificity

"Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications" names the domain and three concrete actions (testing, building, deploying), matching the anchor for several specific actions with minor gaps. It falls short of 5 because coverage omits capabilities the skill actually contains (security scans, matrix builds, reusable workflows), and 'production-ready' is mild fluff; it exceeds anchor 3, which expects only 1-2 actions.

4 / 5

Completeness

The 'what' is clear (GitHub Actions workflow patterns for testing/building/deploying) but there is no 'Use when...' clause or equivalent explicit trigger guidance, which caps completeness at 3 per the judging guidelines. It is not 4 because 'when' is entirely absent rather than merely weakly specified.

3 / 5

Trigger Term Quality

Includes strong natural terms a user would say: "GitHub Actions", "workflow", "testing", "building", "deploying". Missing common variations like 'CI/CD', 'continuous integration', 'pipeline', '.github/workflows', or 'YAML', so it fits 'good keyword coverage; a few natural terms missing' rather than the comprehensive synonym/extension coverage of anchor 5.

4 / 5

Distinctiveness Conflict Risk

"GitHub Actions workflow patterns" carves out a clear niche tied to a specific platform, making wrong-skill triggering unlikely. Minor overlap risk remains with general CI/CD, pipeline, or deployment skills since 'testing, building, and deploying applications' is broad, keeping it just below the minimal-conflict anchor 5.

4 / 5

Total

15

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 7 missing

Warning

Total

14

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills/skills/github-actions-templates/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.