CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

ci-cd-pipeline-patterns

Comprehensive CI/CD pipeline patterns skill covering GitHub Actions, workflows, automation, testing, deployment strategies, and release management for modern software delivery

Quality

55%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/luxor-devops-suite/skills/ci-cd-pipeline-patterns/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

38%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a monolithic GitHub Actions encyclopedia: highly executable and broadly covering common CI/CD cases, but it re-teaches fundamentals Claude already knows, inlines ~1500 lines of reference material with zero progressive disclosure, and lacks a top-level workflow for its stated purpose of designing and implementing pipelines. The strongest aspect is its concrete, mostly copy-paste-ready YAML examples. The weakest are token efficiency and file structure.

Suggestions

Split the body into one-level-deep reference files (e.g. references/testing.md, references/deployments.md, references/security.md, references/release.md) and keep SKILL.md as a concise overview with clearly signaled links.

Delete explanations of concepts Claude already knows — CI/CD definitions, what jobs/steps/secrets are, the stock multi-stage Dockerfile — keeping only non-obvious guidance, and trim the generic 'Best Practices' bullet lists.

Add a top-level decision workflow (identify project type → select CI pattern → select deployment pattern → add security/caching → validate with a smoke test) so the patterns are applied in a guided sequence rather than presented as a catalog.

Replace placeholder scripts (./deploy.sh, ./monitor-canary.sh, ./rollback.sh) with real executable commands or explicitly justified stubs.

DimensionReasoningScore

Conciseness

The ~1520-line body extensively explains concepts Claude already knows: "Continuous Integration (CI): Automatically building and testing code changes as developers commit", "Jobs: Groups of steps executed on the same runner", "Secrets: Encrypted sensitive data", a stock multi-stage Dockerfile, and generic best-practice bullet lists. This matches anchor 1 ("Severely verbose; extensively explains concepts Claude already knows; heavily padded"); it is not 2 because the padding is pervasive across the document rather than limited to a few sections.

1 / 5

Actionability

Nearly all YAML examples are copy-paste ready (setup-node with cache, matrix builds with include/exclude, hashFiles cache keys, OIDC role-to-assume, semantic-release config). However, the deployment patterns depend on non-executable placeholder scripts like "./deploy.sh green", "./monitor-canary.sh 900", and "./rollback.sh". Matches anchor 4 ("Mostly executable guidance; concrete code or commands with minor gaps"); not 5 because of the placeholder commands, not 3 since the overwhelming majority of content is genuinely executable.

4 / 5

Workflow Clarity

Individual patterns contain sequences with checkpoints (blue-green: deploy → "Run smoke tests on Green" → "Monitor Green environment" → "Rollback if needed"), but the skill's stated purpose — designing and implementing pipelines — has no top-level guiding sequence (assess project → choose pattern → implement → validate). Matches anchor 3 ("Steps listed but validation gaps; sequence present but checkpoints missing or implicit"); not 4 because there is no skill-level process, not 2 because the embedded example workflows do include explicit validation and rollback steps.

3 / 5

Progressive Disclosure

No references/ directory or bundle files exist, and the body contains no file references at all — ~1500 lines of platform-specific deployment recipes (Vercel, Netlify, ECS, Kubernetes, Terraform, CloudFormation, monorepo patterns) are all inlined in SKILL.md. Matches anchor 2 ("content that clearly belongs in separate files is inlined"); it is not 3 because there are no references present in any form, even unclearly signaled — disclosure is entirely absent despite the document being far too large for a single file.

2 / 5

Total

10

/

20

Passed

Description

52%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly names its domain with good natural trigger keywords (CI/CD, GitHub Actions, deployment), but it is topic-listing rather than action-describing and entirely lacks a "Use when..." trigger clause. The buzzword framing ("Comprehensive", "modern software delivery") adds padding without capability information. It would benefit most from concrete action verbs and explicit usage triggers.

Suggestions

Add an explicit 'Use when...' clause, e.g. 'Use when setting up GitHub Actions workflows, CI/CD pipelines, or deployment automation for a repository'.

Replace the topic-listing 'covering X, Y, Z' with concrete capability verbs such as 'Design, implement, and optimize CI/CD pipelines with GitHub Actions'.

Trim evaluative padding ('Comprehensive', 'for modern software delivery') and add natural synonyms like 'DevOps' and 'continuous integration/delivery' to broaden trigger coverage.

DimensionReasoningScore

Specificity

"Comprehensive CI/CD pipeline patterns skill covering GitHub Actions, workflows, automation, testing, deployment strategies, and release management" names the domain and sub-topics but contains no concrete actions — it says what the skill covers, not what it does. This matches anchor 2 ("Names the domain but actions are minimal or generic"); it is not 3 because no concrete capability verbs are present, and not 1 because the domain is clearly and concretely enumerated.

2 / 5

Completeness

The "what" is present (covering GitHub Actions, workflows, testing, deployment, release management) but there is no "Use when..." clause or any equivalent explicit trigger guidance, which caps completeness at 3 per the judging guidelines. Matches anchor 3 ("Has a clear 'what' but 'when' is missing or only weakly implied"); not 2 because the what is concrete rather than vague.

3 / 5

Trigger Term Quality

"CI/CD", "GitHub Actions", "workflows", "automation", "testing", "deployment strategies", "release management" are natural phrases users would say when needing this skill. Good keyword coverage matching anchor 4; not 5 because common variants like "DevOps", "continuous integration/delivery" spelled out, and "pipeline setup" are missing.

4 / 5

Distinctiveness Conflict Risk

"CI/CD pipeline patterns", "GitHub Actions" is a recognizable niche, but the breadth ("automation", "testing", "deployment strategies", "release management", "modern software delivery") creates overlap risk with dedicated Docker, testing, security, and platform-deployment skills. Matches anchor 3 ("Somewhat specific but could still overlap with similar skills"); not 4 because the very broad scope raises real conflict risk.

3 / 5

Total

12

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (1524 lines); consider splitting into references/ and linking

Warning

Total

15

/

16

Passed

Repository

manutej/luxor-claude-marketplace

Path

plugins/luxor-devops-suite/skills/ci-cd-pipeline-patterns/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.