CtrlK
BlogDocsLog inGet started
Tessl Logo

review-renovate

Review Renovate bot PRs that update GitHub Actions dependencies. Verifies supply chain integrity by checking pinned commit SHAs against upstream tagged releases, reviews changelogs for breaking changes, and confirms compatibility with existing workflow configurations. Use when a Renovate PR updates GitHub Actions in .github/workflows/.

80

Quality

100%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

100%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, lean review workflow with executable gh commands, an explicit supply-chain validation checkpoint, and a clear final decision step. No fluff and no unnecessary external references.

DimensionReasoningScore

Conciseness

Lean body that assumes Claude's competence — no explanations of what SHAs, changelogs, or Renovate are — and every line directs action; no padded context or concept exposition.

3 / 3

Actionability

Provides concrete, executable commands — 'gh pr view <PR> --json ...', 'gh pr diff <PR>', and 'gh api repos/{owner}/{repo}/git/ref/tags/{version} --jq ...' — copy-paste ready with clear placeholders.

3 / 3

Workflow Clarity

A clear 6-step sequence with an explicit validation checkpoint — 'If any SHA does not match, stop and report a supply chain integrity failure. Do not approve the PR' — plus a structured final report with a safe/do-not-merge decision.

3 / 3

Progressive Disclosure

No bundle files are present (references/, scripts/, assets/ absent) and none are needed; the ~66-line body is well-organized into focused sections, satisfying the simple-skill allowance for progressive disclosure.

3 / 3

Total

12

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A concise, specific description that names concrete actions, provides natural trigger terms, and includes an explicit 'Use when' clause for a clearly distinct niche. No vague fluff or over-claims.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'checking pinned commit SHAs against upstream tagged releases', 'reviews changelogs for breaking changes', and 'confirms compatibility with existing workflow configurations' — matching the multiple-specific-actions anchor.

3 / 3

Completeness

Clearly answers what (verifies supply chain integrity, reviews changelogs, confirms compatibility) and when via the explicit 'Use when a Renovate PR updates GitHub Actions in .github/workflows/' clause.

3 / 3

Trigger Term Quality

Uses natural terms a user would say — 'Renovate bot PRs', 'GitHub Actions dependencies', 'pinned commit SHAs', 'changelogs', '.github/workflows/' — with good coverage and no jargon-only phrasing.

3 / 3

Distinctiveness Conflict Risk

A narrow, distinct niche (Renovate-authored PRs updating GitHub Actions) with a trigger unlikely to fire for unrelated skills; third-person voice is used throughout.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
backnotprop/plannotator
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.