CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

github-actions

Manage ClaudeBar's GitHub Actions CI/CD pipelines: build, test, and release workflows. Use this skill when: (1) Setting up secrets for CI/CD (certificate, API key, Sparkle key, Codecov) (2) Creating a new release — tag-based or manual workflow_dispatch (3) Triggering or explaining the build.yml, tests.yml, or release.yml workflows (4) Debugging release failures (signing, notarization, appcast) (5) Managing beta vs stable channels for Sparkle auto-updates (6) User says "release a new version", "push a tag", "set up CI secrets", "why did the release fail"

77

Quality

97%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

93%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, well-structured overview: copy-paste release commands, exact secret names, a clear pipeline diagram, and clean one-level-deep references to real bundle files. The only meaningful gap is the absence of an explicit post-tag verification step (monitor the workflow run, confirm the published release) in the release workflow.

Suggestions

Add a verification step after 'git tag v1.2.0 && git push origin v1.2.0': instruct Claude to monitor the release.yml Actions run and confirm the GitHub Release and appcast were published before reporting success.

In the Debugging Failures section, include one concrete first command (e.g., where to find the failed run's logs) instead of only pointing to the reference file, so common failure triage can start without a file load.

DimensionReasoningScore

Conciseness

The body is lean — tables, copy-paste commands, and a numbered pipeline — with no explanation of concepts Claude already knows (no git, notarization, or CI tutorials). Version numbers appear only as generic examples (v1.2.0), not time-sensitive pins, so every token carries repo-specific information Claude cannot infer.

5 / 5

Actionability

Guidance is fully executable: "git tag v1.2.0 && git push origin v1.2.0", the beta-tag variant, the exact manual-dispatch UI path ("Actions → Release → Run workflow"), enumerated supported version formats, and a secrets table with exact names like APPLE_CERTIFICATE_P12 and SPARKLE_EDDSA_PRIVATE_KEY, covering the common release cases.

5 / 5

Workflow Clarity

The release sequence is clearly ordered (changelog → commit/push → tag/push → 12-step pipeline) and the pipeline itself validates the SemVer version, but there is no explicit post-tag checkpoint telling Claude to monitor the Actions run or verify the published release. This is anchor 4's 'clear sequence with most checkpoints; minor validation gaps' rather than anchor 5's explicit validation steps and feedback loops — though not anchor 3, since checkpoints are not merely implicit.

4 / 5

Progressive Disclosure

The ~90-line body is an overview whose two links (references/secrets-setup.md, references/release-workflow.md) resolve to real files exactly one level deep, signaled at the point of need (secrets table 'See' column, troubleshooting, beta channel). Detailed setup and troubleshooting content is appropriately split into the references rather than inlined.

5 / 5

Total

19

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is exemplary: a concrete capability statement followed by an explicit six-item trigger list that includes verbatim user phrases and named workflow files. It answers what and when clearly, uses imperative/third-person voice, and is tightly scoped to this repo's CI/CD domain with no vague padding.

DimensionReasoningScore

Specificity

Lists multiple concrete actions with concrete sub-details: "Setting up secrets for CI/CD (certificate, API key, Sparkle key, Codecov)", "Debugging release failures (signing, notarization, appcast)", and "tag-based or manual workflow_dispatch". Coverage is comprehensive with no generic filler, matching the anchor-5 example rather than anchor 4's 'minor gaps'.

5 / 5

Completeness

Explicitly answers both "what" ("Manage ClaudeBar's GitHub Actions CI/CD pipelines: build, test, and release workflows") and "when" via a "Use this skill when:" clause with six concrete triggers including quoted user phrasing, mirroring the anchor-5 example structure.

5 / 5

Trigger Term Quality

Includes file-name triggers (build.yml, tests.yml, release.yml), domain synonyms (signing, notarization, appcast, beta, Sparkle, CI/CD), and verbatim natural user phrases such as "release a new version", "push a tag", "set up CI secrets", "why did the release fail". This matches the anchor-5 pattern of comprehensive natural terms including file names.

5 / 5

Distinctiveness Conflict Risk

Scoped to "ClaudeBar's GitHub Actions" with repo-specific artifacts (Sparkle appcast, named workflow files, specific secrets), giving it a clear niche with minimal overlap risk against generic CI or git skills.

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

tddworks/ClaudeBar

Path

.claude/skills/github-actions/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.