# 8 Factor Github Actions

> A Claude skill from Just-Agent/just-product-factor.

- **Type:** Skill
- **Install:** `agentstack add skill-just-agent-just-product-factor-8-factor-github-actions`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Just-Agent](https://agentstack.voostack.com/s/just-agent)
- **Installs:** 0
- **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Just-Agent](https://github.com/Just-Agent)
- **Source:** https://github.com/Just-Agent/just-product-factor/tree/main/skills/8-factor-github-actions

## Install

```sh
agentstack add skill-just-agent-just-product-factor-8-factor-github-actions
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# 8-factor-github-actions Skill

## Name

8-factor-github-actions

## Purpose

Audit and improve GitHub Actions workflows for safe automation, clear triggers, least privilege, caching, reuse, and release readiness.

## When to use

- CI workflows
- Release workflows
- GitHub Pages deployment
- Scheduled automation
- Repository dispatch workflows

## When not to use

- Local scripts with no GitHub integration
- Non-GitHub CI systems unless adapting principles

## Inputs

Ask for or inspect:

- README and docs
- source files
- examples and recipes
- configuration files
- tests and validation scripts
- CI/CD workflow files
- logs, changelog, release notes, or version history

## Workflow

1. Identify the project goal and user-facing promise.
2. Inspect available files.
3. Apply `checklist.md`.
4. Score with `scoring-rubric.md`.
5. Produce an audit report using `audit-report-template.md`.
6. Produce a refactor plan using `refactor-plan-template.md`.
7. Prioritize changes by product value and release readiness.
8. Validate changes if the environment allows.

## Review dimensions

- Trigger design
- Permissions
- Secrets handling
- Caching
- Build/test steps
- Artifacts
- Failure messages
- Reuse and maintainability

## Refactor priorities

1. Set least permissions
2. Make triggers explicit
3. Add validation jobs
4. Improve cache/artifacts
5. Document usage

## Output format

Return:

1. Summary
2. Scorecard
3. Critical findings
4. Recommended changes
5. Refactor plan
6. Validation plan
7. Next iteration suggestions

## Example calls

See `usage-examples.md`.

## Version

v0.5.0

## Agent manifest

This Skill includes a machine-readable `skill.json` manifest so an Agent can quickly identify triggers, expected inputs, expected outputs, required files, and the review protocol before reading the full markdown pack.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Just-Agent](https://github.com/Just-Agent)
- **Source:** [Just-Agent/just-product-factor](https://github.com/Just-Agent/just-product-factor)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-just-agent-just-product-factor-8-factor-github-actions
- Seller: https://agentstack.voostack.com/s/just-agent
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.