AgentStack
SKILL verified MIT Self-run

Github Actions

skill-ashish7802-awesome-api-skills-github-actions · by ashish7802

A Claude skill from ashish7802/awesome-api-skills.

No reviews yet
0 installs
9 views
0.0% view→install

Install

$ agentstack add skill-ashish7802-awesome-api-skills-github-actions

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Github Actions? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

GitHub Actions Skill

> Automate your software workflows directly from GitHub.

Ecosystem Graph

graph LR
  github-actions["GitHub Actions"]
  github-actions -- "depends on" --> git
  github-actions -- "works well with" --> docker

Quick Start

GitHub Actions uses YAML workflows defined in .github/workflows/ to automatically run tests, build images, and deploy code upon pushes or pull requests.

on: [push]
jobs:
  build:
    runs-on: ubuntu-latest

Production Patterns

Reusable Workflows

Do not duplicate CI steps across 50 repositories. Create a centralized repository containing reusable workflows (workflow_call), and have individual repositories reference them. This allows updating CI standards globally.

Architecture & Scaling

Dependency Caching

Always cache node_modules or ~/.cache/pip using the actions/cache action or built-in caching via actions/setup-node. This can reduce CI pipeline times by 50% or more.

Error Recovery

If a flaky test fails the pipeline, you can use the continue-on-error: true flag for that specific step, though it is highly recommended to fix the test rather than masking it.

Security Notes

Never use pull_request_target unless absolutely necessary, as it grants actions access to repository secrets even from forked PRs, leading to easy secret exfiltration attacks. Use OpenID Connect (OIDC) instead of storing long-lived AWS/GCP credentials in GitHub Secrets.

Relationships

Prerequisites: [git](/skills/git)

Works Well With: [docker](/skills/docker)

References

Why use this skill

Use this when your agent works with github-actions — structured patterns beat pasted docs and prevent common hallucinations.

AI pitfalls

  • Referencing CLI flags or config keys that do not exist
  • Using outdated major versions of tools
  • Skipping lockfile or version pinning in examples

Production checklist

  • [ ] Secrets in environment variables, not source code
  • [ ] Error handling and logging in place
  • [ ] Rate limits and timeouts configured

Related skills

  • [git](../git/SKILL.md) — depends on
  • [docker](../docker/SKILL.md) — works well with

> Last Verified: 2026-07-02

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.