CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

github-workflow-automation

Patterns for automating GitHub workflows with AI assistance, inspired by [Gemini CLI](https://github.com/google-gemini/gemini-cli) and modern DevOps practices.

Quality

50%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/github-workflow-automation/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

42%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-sectioned catalog of GitHub Actions patterns with genuinely useful concrete YAML, but it is monolithic and padded with boilerplate Claude already knows, and its AI-integration examples are stubs rather than runnable code. Destructive automation (force-push rebases, rollbacks, branch cleanup) lacks any validation or feedback loops. Splitting into per-topic reference files and completing the AI-call stubs would raise most dimensions.

Suggestions

Split the six topic catalogs (PR review, issue triage, CI/CD, Git operations, on-demand bot, repo config) into separate reference files linked from a concise overview, and move boilerplate Claude already knows (actions/stale config, CODEOWNERS syntax) out of the main file entirely.

Complete or remove the non-executable stubs — analyzeIssue() in 2.1, callAI() in 3.2, ai.chat() in 5.1, and the smartCherryPick pseudocode in 4.2 — either with working Anthropic SDK calls like section 1.1 or with explicit 'wire up your AI client here' markers.

Add validation checkpoints before destructive/batch operations: dry-run or list branches before deletion in 4.3, verify CI green before force-pushing the rebase in 4.1, and confirm the stable tag exists before rollback in 3.3.

Fix the malformed section 1.2 (unclosed code fence causing review-comment content to leak outside the block) and replace the time-sensitive claude-3-sonnet-20240229 model reference with a current model id or a deprecation note.

DimensionReasoningScore

Conciseness

The ~850-line body reproduces full boilerplate Claude already knows — a complete actions/stale@v9 config, CODEOWNERS syntax, standard checkout/rebase steps, basic branch-protection API calls — where a few illustrative snippets per pattern would do. It also carries duplicated diff-extraction blocks across sections (1.1 and 1.3) and a broken/malformed section 1.2 with an unclosed fence and stray content. This is 'noticeably verbose; several unnecessary explanations or padded sections'; a 3 would mean only minor trims needed, but the padding here is structural.

2 / 5

Actionability

Many examples are concrete YAML (the PR review workflow, stale management, smart test selection), but a large share of the AI-integration snippets are non-executable stubs: section 2.1 calls an undefined analyzeIssue(), 3.2 an undefined callAI(), 5.1 an undefined ai.chat(), and 4.2 is TypeScript pseudocode with fictional exec/ai helpers. 'Some concrete guidance but incomplete; pseudocode instead of executable code' fits; 4 would require mostly executable guidance with only minor gaps.

3 / 5

Workflow Clarity

Each example has an internal rough sequence (e.g., rollback: find stable tag → checkout → deploy → notify Slack), but validation/checkpoints are absent throughout, and destructive or batch operations (force-push rebase in 4.1, rollback in 3.3, branch cleanup in 4.3) ship with no verification steps — which caps workflow clarity at 3 per the guidelines. Not a 2 because individual workflows are coherent and well-formed; not a 4+ because no feedback loops or validation exists anywhere.

3 / 5

Progressive Disclosure

No bundle files exist (no references/, scripts/, or assets/ directories) and no external references are cited, so the entire catalog — six full workflow files plus config, best practices, and resources — is inlined in one monolithic SKILL.md. The numbered section headers give real structure (better than anchor 2's 'minimal structure'), but content that clearly belongs in per-topic reference files is all inline with no navigation to detail, matching anchor 3 ('Some structure but could be better organized; content that should be separate is inline').

3 / 5

Total

11

/

20

Passed

Description

36%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description names a plausible domain but says nothing concrete: no specific automation types, no trigger guidance, and vague filler like 'modern DevOps practices'. It would rarely fire correctly because it lacks the natural terms (GitHub Actions, PR review, issue triage) users actually say. Adding an explicit 'Use when...' clause and naming the concrete automation categories would move most dimensions up two levels.

Suggestions

Add an explicit trigger clause, e.g. 'Use when setting up GitHub Actions workflows, AI-assisted PR review, issue triage automation, or CI/CD pipelines'.

Replace the generic 'Patterns for automating GitHub workflows' with concrete actions: 'Automates PR reviews, issue triage/labeling, smart test selection, rebases, and branch cleanup via GitHub Actions'.

Drop the 'inspired by Gemini CLI and modern DevOps practices' attribution and buzzwords — they add tokens without triggering value.

DimensionReasoningScore

Specificity

The description names the domain ('automating GitHub workflows with AI assistance, inspired by Gemini CLI and modern DevOps practices') but lists no concrete actions — it never mentions PR review, issue triage, GitHub Actions, or CI/CD, the actual capabilities. This matches the anchor 'Names the domain but actions are minimal or generic'; a 3 would require 1-2 concrete actions, which are absent.

2 / 5

Completeness

The 'what' is vague ('Patterns for automating GitHub workflows') and there is no 'when' / 'Use when...' clause at all, matching anchor 2 ('Has a vague what and no when'). A 3 would need a clear 'what' with concrete actions; a 4 would require an explicit when-clause, which is entirely missing (also capping completeness per the judging guidelines).

2 / 5

Trigger Term Quality

'GitHub workflows', 'automating', 'AI assistance', and 'DevOps' are relevant keywords, but the natural phrases a user would say — 'GitHub Actions', 'PR review', 'issue triage', 'CI/CD', 'rebase', 'cherry-pick' — are all missing. Anchor 3 ('Some relevant keywords but missing common variations or synonyms') fits; 4 would require good coverage of natural terms.

3 / 5

Distinctiveness Conflict Risk

'Automating GitHub workflows with AI' carves out a recognizable niche, but the phrasing overlaps with generic DevOps, CI/CD, and Git-automation skills. Anchor 3 ('Somewhat specific but could still overlap with similar skills') fits; 4 would require mostly distinct triggers, which the generic wording does not provide.

3 / 5

Total

10

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (850 lines); consider splitting into references/ and linking

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/github-workflow-automation/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.