github-actions-workflow-pro

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.

By BretFisher/skills (GitHub) · devops · 21 stars · scanned at commit 73c7ca5

Create, edit, audit, and speed up GitHub Actions workflows using Bret Fisher's opinionated DevOps rules. Use it when the user asks to create a workflow or CI/CD pipeline, edit or add a job to an existing `.github/workflows/*` file (even a one-line change), review or harden a workflow for security, speed up slow CI, publish a container image from CI, automate releases, or mentions GHA, action pinning, or findings from gasa, zizmor, poutine, pinact, or actionlint, even if they don't say "GitHub A…

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this. Expected for a devops skill.

Found in 7 places.

plugins/devops/skills/github-actions-workflow-pro/SKILL.md, line 35- Cloud credentials come from OIDC (`id-token: write`), and the cloud credentials step (`configure-aws-credentials`) runs after `npm ci`, `pip install`, and the
plugins/devops/skills/github-actions-workflow-pro/SKILL.md, line 72Run `scripts/validate.sh <file>...` on every file you edited. One call runs `actionlint`, `zizmor` (through `scan.sh`, so the token from your `gh` login never a
plugins/devops/skills/github-actions-workflow-pro/references/audit.md, line 11- Check the tools: `command -v actionlint shellcheck zizmor poutine pinact gasa gh` and `gh auth status`. Everything that talks to GitHub uses the user's `gh` l

Show 4 more

plugins/devops/skills/github-actions-workflow-pro/references/audit.md, line 49| `poutine` | `injection`, `untrusted_checkout_exec`, `confused_deputy_auto_merge`, `default_permissions_on_risky_events`, `job_all_secrets`, `unverified_scr
plugins/devops/skills/github-actions-workflow-pro/references/security.md, line 88- Configure cloud credentials (`configure-aws-credentials`) after `npm ci`, `pip install`, and the build steps, or build in a separate job that has no `id-token
plugins/devops/skills/github-actions-workflow-pro/scripts/scan.sh, line 35echo "scan.sh: $tool is not installed (brew install $tool)" >&2
plugins/devops/skills/github-actions-workflow-pro/scripts/validate.sh, line 47echo "$name: absent (brew install $name)"

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a devops skill.

Found in 4 places.

plugins/devops/skills/github-actions-workflow-pro/scripts/run-stats.py, line 96out = subprocess.run(["gh", *args], check=True, capture_output=True, text=True).stdout
plugins/devops/skills/github-actions-workflow-pro/scripts/run-stats.py, line 97except subprocess.CalledProcessError as e:
plugins/devops/skills/github-actions-workflow-pro/scripts/run-stats.py, line 128if subprocess.run(["gh", "auth", "status"], capture_output=True).returncode != 0:

Show 1 more

plugins/devops/skills/github-actions-workflow-pro/scripts/run-stats.py, line 199top = subprocess.run(["git", "rev-parse", "--show-toplevel"], capture_output=True, text=True)

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'github-actions-workflow-pro' ] || [ -L ~/.agents/skills/'github-actions-workflow-pro' ]; then echo 'A skill folder named github-actions-workflow-pro already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/BretFisher/skills' "$d" && git -C "$d" checkout --quiet '73c7ca51f35a080943e66554346d9d2150ed1e29' -- 'plugins/devops/skills/github-actions-workflow-pro' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/devops/skills/github-actions-workflow-pro' ~/.agents/skills/'github-actions-workflow-pro' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'github-actions-workflow-pro' ~/.claude/skills/'github-actions-workflow-pro' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for BretFisher/skills shows the score of its lowest-scoring skill.

SkillTrust badge for BretFisher/skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/BretFisher/skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/BretFisher/skills/)

Score history

Date	Version	Score
2026-11-07	`73c7ca5`	82