CtrlK
BlogDocsLog inGet started
Tessl Logo

vannifr/ci-local-parity

Use when setting up or auditing a project's CI/CD pipeline together with local verification — ensures pnpm/npm verify (or equivalent) actually covers everything CI checks, adds pre-commit/pre-push git hooks that enforce this locally, and keeps trunk-based development honest (small commits, frequent pushes, CI checked per push not per batch). Load before building a new .woodpecker.yml/.github/workflows, before adding SonarQube/coverage, or when "it passed locally but failed in CI" comes up.

69

Quality

87%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

Overview
Quality
Evals
Security
Files

Quality

Content

70%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, highly actionable CI/local-parity reference with clear validated workflows, but it is verbose in places and monolithic — a 338-line single file with no reference split where detailed CI implementations could be externalized.

Suggestions

Move the full 'Gitleaks in CI' YAML and the docker image-parity reproduction into a references/ file (e.g. references/ci-examples.md) and link to it from SKILL.md, so the overview stays lean and detail is one level deep.

Tighten expository anecdotes — e.g. the 'Encountered empirically ... copied into multiple projects' passage and the repeated 'core rule (repeated, specific to this case)' framing — to the concrete rule without the backstory.

Provide an executable script or code block for the central gracefully-degrading external check (the 1-2-3 numbered procedure) instead of describing it in prose, so the skill's core pattern is copy-paste ready.

DimensionReasoningScore

Conciseness

Mostly concrete and non-obvious (no basic-concept padding), but includes tighten-able prose such as 'Encountered empirically: this pattern was in a "proven, already used elsewhere" pipeline and got copied into multiple projects' and a repeated 'The core rule (repeated, specific to this case)' framing.

3 / 5

Actionability

Provides concrete copy-paste artifacts (pre-commit/pre-push hook scripts, Woodpecker/GitHub Actions/GitLab YAML, a gitleaks CI block with a real version v8.30.1 and the zero-SHA fallback, a docker run reproduction), but the central external-check pattern is given as numbered prose ('Check whether the required credentials/tools are present ... warn and exit 0') rather than executable code, with placeholders like 'scripts/<external-check-name>.mjs'.

4 / 5

Workflow Clarity

Clear sequenced sub-workflows with explicit validation and feedback loops: the audit 'Checklist — for every project with CI', the external check's 1-2-3 decision logic ('if not: warn and exit 0 ... Only then run the real check'), and image-parity steps ('query the real CI pipeline status — never report "pushed" as "done"'), plus the gitleaks baseline review loop.

5 / 5

Progressive Disclosure

Good section headers structure a single 338-line file, but with no references/scripts/assets bundle files, detailed inlined content that could live in separate reference files (the full gitleaks CI YAML, the docker reproduction command) is kept inline rather than split into one-level-deep references.

3 / 5

Total

15

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description that concretely states what the skill does, when to load it, and the natural trigger phrases a user would say, with minimal conflict risk against other skills.

DimensionReasoningScore

Specificity

Lists multiple concrete actions — 'ensures pnpm/npm verify ... actually covers everything CI checks, adds pre-commit/pre-push git hooks that enforce this locally, and keeps trunk-based development honest (small commits, frequent pushes, CI checked per push not per batch)' — giving comprehensive coverage of what the skill does.

5 / 5

Completeness

Explicitly answers both what ('ensures ... covers everything CI checks, adds ... hooks ... keeps trunk-based development honest') and when ('Use when setting up or auditing ...', 'Load before building a new .woodpecker.yml/.github/workflows', 'when "it passed locally but failed in CI" comes up') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Comprehensive natural-term coverage including synonyms and file extensions: 'CI/CD pipeline', 'pnpm/npm verify', 'pre-commit/pre-push git hooks', 'SonarQube/coverage', '.woodpecker.yml/.github/workflows', plus the natural user phrase 'it passed locally but failed in CI'.

5 / 5

Distinctiveness Conflict Risk

Clear niche (CI/local parity) with distinct triggers; the body even explicitly disambiguates from similarly-named tools ('claude-pre-commit', 'config-drift-checker'), minimizing conflict risk.

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

Table of Contents