CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

github-automation

Automate GitHub repositories, issues, pull requests, branches, CI/CD, and permissions via Rube MCP (Composio). Manage code workflows, review PRs, search code, and handle deployments programmatically.

Quality

71%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/github-automation/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

63%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, highly actionable reference whose per-workflow tool sequences, parameters, and pitfall annotations are genuinely valuable. Its weaknesses are redundancy (Known Pitfalls and Quick Reference duplicate earlier sections), a filler closing section, no error-recovery loops, and a monolithic single-file layout where split reference files would serve progressive disclosure.

Suggestions

Remove the redundant 'Known Pitfalls' section and the vacuous 'When to Use' section; fold anything not already covered into the relevant workflow's Pitfalls list.

Split per-domain detail (e.g., issues/PRs/repo-admin workflows with their parameter and pitfall tables) into one-level-deep reference files like references/issues.md and references/pull-requests.md, keeping SKILL.md as an overview with the Setup and safety rules.

Add one concrete example invocation with real argument values per workflow (e.g., a GITHUB_CREATE_A_PULL_REQUEST call with owner/repo/head/base filled in) to close the actionability gap, and brief fix-retry guidance for the named failure modes (422/404/409).

DimensionReasoningScore

Conciseness

The body is mostly lean, high-value Rube-specific detail (tool slugs, params, error codes) that Claude cannot know, but it includes padded redundancy: the 'Known Pitfalls' section repeats the per-workflow pitfalls nearly verbatim, the Quick Reference table restates the tool sequences, and the closing 'When to Use' section ('This skill is applicable to execute the workflow or actions described in the overview.') is pure filler. It is above 2 because the padding is duplication rather than explanation of concepts Claude already knows, but below 4 because three sections could be trimmed or removed outright.

3 / 5

Actionability

Gives exact tool names with Required/Optional sequencing, concrete parameters (owner, repo, head, base, merge_method), and specific failure modes (422 on invalid base/head, 404 on unprotected branches, per_page max 100, 384KB search index limit) — genuinely executable guidance. Not 5 because there are no example invocations with actual argument values (e.g., a sample RUBE_MANAGE_CONNECTIONS or GITHUB_CREATE_A_PULL_REQUEST call), leaving minor gaps for the most common cases.

4 / 5

Workflow Clarity

Each workflow has a 'When to use' gate and a numbered, labeled tool sequence, and destructive/batch operations do include validation checkpoints (verify mergeable status immediately before merge, require explicit user confirmation for merge/delete, check CI runs before merging, iterate pagination until empty) — so the destructive-op cap at 3 does not apply. Not 5 because there are no error-recovery feedback loops (e.g., what to do after a 422 or a failed auth check) beyond naming the failure modes.

4 / 5

Progressive Disclosure

No bundle files exist (no references/, scripts/, or assets/), and the entire ~230-line reference lives inline in SKILL.md. Section organization is good, but per-domain API details and the quick-reference table are exactly the content that belongs in one-level-deep reference files, placing it at the 'some structure but could be better organized; content that should be separate is inline' anchor. Not 4 because there is no split at all, not 2 because navigation within the file is clear and well-sectioned.

3 / 5

Total

14

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, information-dense description that clearly states what the skill does with good natural trigger terms and a distinct niche. Its main defect is the complete absence of a 'Use when...' clause, which caps completeness and weakens triggering guidance.

Suggestions

Append an explicit trigger clause, e.g.: 'Use when the user wants to manage GitHub repos, issues, PRs, branches, CI/CD, or permissions through Rube MCP, or mentions GitHub automation, merging PRs, or triggering workflows.'

Name the concrete destructive/decision-relevant actions (merge PRs, create branches, trigger workflows) so trigger terms cover the highest-value use cases.

Add common synonym triggers users actually say: 'GitHub Actions', 'commits', 'collaborators', 'repo settings'.

DimensionReasoningScore

Specificity

Lists several specific actions across concrete domains ('Automate GitHub repositories, issues, pull requests, branches, CI/CD, and permissions', 'review PRs, search code, and handle deployments') with only minor gaps (e.g., merges, commits, labels not named). It falls short of 5 because the leading verbs ('Automate', 'Manage') are umbrella terms rather than the distinct concrete actions in the 5 anchor, and above 3 because coverage spans multiple named capabilities.

4 / 5

Completeness

The 'what' is clear (automating GitHub repos, issues, PRs, branches, CI/CD, permissions), but there is no 'Use when...' clause or equivalent explicit trigger guidance anywhere in the description, which caps completeness at 3 per the judging guidelines. It cannot score 4 since the 'when' is entirely absent rather than merely implicit or under-specified.

3 / 5

Trigger Term Quality

Contains natural phrases users would say: 'GitHub', 'issues', 'pull requests', 'PRs', 'branches', 'CI/CD', 'review PRs', 'search code', 'deployments'. Not 5 because common variations like 'merge', 'commits', 'GitHub Actions', or 'close issue' are missing; not 3 because keyword coverage is genuinely good rather than partial.

4 / 5

Distinctiveness Conflict Risk

The Rube MCP (Composio) framing plus GitHub-specific nouns (issues, pull requests, CI/CD, permissions) carve out a mostly distinct niche. Not 5 because it could overlap with generic git/GitHub or CI/CD skills in an environment where multiple GitHub-related skills exist; not 3 because the named stack and domain objects make mis-triggering unlikely.

4 / 5

Total

15

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/github-automation/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.