Github Actions

This one helps you write and maintain GitHub Actions workflows without falling into the usual traps. It's built around the most common mistakes people make: using outdated action versions, hardcoding secrets, and leaving injection vulnerabilities in event-triggered runs. Before you use any action, it shows you how to check the latest release with gh CLI. It also flags when you're installing tools that are already on the runner (Node, Python, Docker are all there by default) and explains the security footguns like pull_request_target. The anti-patterns section is honest about what actually breaks in production. Load this when you're editing anything in .github/workflows or reviewing CI/CD security.

Install to Claude Code

npx -y skills add dalestudy/skills --skill github-actions --agent claude-code