CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

github-ops

Operates GitHub via gh CLI and REST/GraphQL — PRs, issues, Actions, self-hosted Runner inventory/capacity, repos, collaborators, org permissions, 2FA — with explicit target, authorization, and independent readback. Use when a write reports success but state didn't change, or choosing gh/REST/GraphQL/UI-only. Not for local Git recovery (use git-safety-net), maintainer PR review (use github-review-pr), or upstream contribution (use github-contributor).

Quality

92%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

92%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An excellent operations runbook: an explicit 8-stage contract with pervasive validation and feedback loops, copy-paste-ready commands, and clean one-level-deep routing to a complete, verified bundle. The only meaningful improvement is tightening the checked_gh wrapper prose and recurring identity rules, and moving some §8 authentication detail into a reference file.

DimensionReasoningScore

Conciseness

The body never re-teaches known concepts and is relentlessly operational, but it has minor over-explanation that could be trimmed: the ~40-line checked_gh wrapper contract prose, the §8 browser-authentication detail, and identity/authorization rules recurring across §1, §2, and the boundaries section — efficient per anchor 4 rather than anchor 3, since there is no fluffy or unnecessary concept explanation.

4 / 5

Actionability

Guidance is copy-paste ready throughout: identity-binding commands (`gh auth status --hostname HOST`, `gh api --hostname HOST user --jq '.login'`), executable `uv run python <github-ops-dir>/scripts/checked_gh.py` invocations, a concrete delta-preview text template, a per-mutation readback evidence table, and a five-command read-only quick reference with `--json`/`--jq` — matches anchor 5's fully executable, common-cases-covered bar.

5 / 5

Workflow Clarity

The 8-stage numbered contract (classify → bind identity/target → preview delta → choose interface → mutate once → independent readback → honest reporting → scoped auth) has explicit validation checkpoints and genuine feedback loops: read-back-before-retry for non-idempotent writes, mismatch handling that reports "failed/no-op or partially applied" with recovery, and four honest terminal states — matches anchor 5, and the destructive/batch cap does not apply because validation is pervasive.

5 / 5

Progressive Disclosure

The task-to-reference routing table points to all 11 reference files, each verified to exist, one level deep with clear signals ("Read only the reference required for the task"); the linked script (scripts/checked_gh.py, with the documented --expected-login/--host flags) and the deep anchor (pr_operations.md#merging-prs, matching a real "Merging PRs" section) are real, and the sparse reference-to-reference links are lateral navigation rather than buried content — matches anchor 5.

5 / 5

Total

19

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: comprehensive capability enumeration, explicit and concrete "Use when" triggers, and explicit negative boundaries against named sibling skills. The only weaknesses are reliance on the single generic verb "Operates" instead of per-domain action verbs, and missing common synonyms like "pull request", "repository", and "workflow" in the trigger vocabulary.

DimensionReasoningScore

Specificity

The description enumerates comprehensive, concrete capability areas ("PRs, issues, Actions, self-hosted Runner inventory/capacity, repos, collaborators, org permissions, 2FA") plus operating interfaces ("gh CLI and REST/GraphQL") and discipline ("explicit target, authorization, and independent readback"), but it relies on the single generic verb "Operates" rather than distinct concrete action verbs per domain — above anchor 4's coverage but below anchor 5's action specificity.

4 / 5

Completeness

Both "what" (full capability enumeration with interfaces) and "when" are explicitly stated with concrete trigger phrases — "Use when a write reports success but state didn't change, or choosing gh/REST/GraphQL/UI-only" — plus explicit negative boundaries; this is more specific than anchor 4's example and clearly matches anchor 5.

5 / 5

Trigger Term Quality

Natural terms users would actually say are well covered ("PRs", "issues", "Actions", "repos", "collaborators", "org permissions", "2FA", "gh CLI"), but common synonyms and variations ("pull request", "repository", "workflows", "CI") are missing, which matches anchor 4 rather than anchor 5's comprehensive synonym coverage.

4 / 5

Distinctiveness Conflict Risk

The description claims a clear niche (GitHub hosted-state operations with verification discipline) and explicitly de-conflicts against three named sibling skills ("use git-safety-net", "use github-review-pr", "use github-contributor"), giving minimal wrong-skill trigger risk — matches anchor 5.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

daymade/claude-code-skills

Path

github-ops/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.