CtrlK
BlogDocsLog inGet started
Tessl Logo

github-actions-templates

Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications.

55

Quality

63%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills-claude/skills/github-actions-templates/SKILL.md

The canonical home for this skill is github-actions-templates in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

65%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is lean and offers genuinely executable, copy-paste-ready YAML patterns covering common CI/CD cases. However, the destructive deployment workflows lack explicit validation/feedback loops, and all referenced bundle files are missing from the skill directory.

Suggestions

Add explicit validation/verification checkpoints to the destructive deploy workflows (e.g., validate manifests before `kubectl apply`, run `kubectl rollout status` with a retry-on-failure loop, gate production deploy behind a required review).

Create the referenced bundle files (assets/test-workflow.yml, assets/deploy-workflow.yml, assets/matrix-build.yml, references/common-workflows.md) — or remove the broken references — so progressive disclosure points to real resources.

Replace `@master` action pins in the Security Scan example with specific versions to align with the body's own 'Use specific action versions' best practice, and fill placeholder steps like '# Deployment commands here'.

DimensionReasoningScore

Conciseness

The body is mostly lean, executable YAML examples plus a tight best-practices list with no padding explaining what GitHub Actions or Docker is; minor duplication (restated intro/'Purpose' and a 'Reference Files' section that repeats inline references) could be trimmed.

4 / 5

Actionability

Provides several complete, copy-paste-ready YAML workflows (test, Docker build/push, k8s deploy, matrix, reusable, security, approval deploy); minor gaps include placeholder steps ('# Deployment commands here') and @master action pins that contradict the body's own 'use specific versions' guidance.

4 / 5

Workflow Clarity

The destructive/batch deploy workflows (kubectl apply/rollout, production deploy) lack explicit validate→fix→retry feedback loops, and the '## Instructions' list is generic; per rubric, missing validation in destructive operations caps workflow clarity at 3.

3 / 5

Progressive Disclosure

References are clearly signaled inline and in a '## Reference Files' section, but every referenced bundle path (assets/*.yml, references/common-workflows.md, resources/implementation-playbook.md) points to files/directories that do not exist in the bundle.

3 / 5

Total

14

/

20

Passed

Description

61%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly states what the skill does but omits any explicit 'when to use' trigger guidance, which caps completeness. It is concise, distinct, and uses natural domain keywords but lacks synonyms and concrete trigger phrases.

Suggestions

Add a 'Use when...' clause naming concrete trigger phrases such as 'Use when setting up GitHub Actions CI/CD workflows, GitHub workflows, .github/workflows, or CI pipelines for testing, building, and deploying.'

Sharpen the action list from broad verbs ('testing, building, deploying') to concrete operations ('matrix builds, Docker image builds and pushes, Kubernetes deploys, security scans').

Include common synonyms/extensions users actually say — 'CI/CD', 'GitHub workflows', '.github/workflows' — to improve trigger term coverage.

DimensionReasoningScore

Specificity

Names the domain and three concrete actions ('testing, building, and deploying applications'), but these are broad verbs rather than granular specifics like matrix builds, Docker push, or security scans that appear only in the body.

4 / 5

Completeness

Has a clear 'what' but no 'Use when...' clause or equivalent explicit trigger guidance in the description; per rubric this caps completeness at 3 even though the body contains a 'Use this skill when' section.

3 / 5

Trigger Term Quality

Includes natural terms ('GitHub Actions workflow patterns', 'testing', 'building', 'deploying') but misses common synonyms users say like 'CI/CD', 'GitHub workflows', '.github/workflows', or 'CI pipeline'.

4 / 5

Distinctiveness Conflict Risk

'GitHub Actions workflow patterns' is a specific niche with minimal conflict risk; only minor overlap with adjacent CI/CD or pipeline-design skills.

4 / 5

Total

15

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 7 missing

Warning

Total

14

/

16

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.