Menu
Best practices for GitHub Actions workflows including security, performance, and maintenance
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/aibot88/sec_skill_store --skill github-actionsThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
GuÃa tÃĐcnica completa para integrar 250+ servicios externos con agentes IA usando Composio. Cubre instalaciÃģn, autenticaciÃģn OAuth, gestiÃģn de herramientas, triggers y flujos multi-servicio.
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
Based on SOC occupation classification
Showing SKILL.md
| name | github-actions |
| description | Best practices for GitHub Actions workflows including security, performance, and maintenance |
| goal | āđāļāđ GitHub Actions āļāļēāļĄ best practices |
| outcome | Workflows āļĄāļĩāļāļ§āļēāļĄāļāļĨāļāļāļ āļąāļĒāđāļĨāļ°āļāļĢāļ°āļŠāļīāļāļāļīāļ āļēāļ |
āđāļāđ Skill āļāļĩāđāđāļĄāļ·āđāļāļāļąāļāļāļēāđāļĨāļ°āļāļąāļāļāļēāļĢ GitHub Actions workflows
| Priority | Impact | Reference | Name | Description | Prefix | Condition |
|---|---|---|---|---|---|---|
| 1 | CRITICAL | secrets-management.md | Secrets Management | āļāļēāļĢāļāļąāļāļāļēāļĢ secrets āļāļĒāđāļēāļāļāļĨāļāļāļ āļąāļĒ | gha- | āđāļĄāļ·āđāļāļāļąāļāļāļēāļĢ secrets |
| 2 | HIGH | third-party-actions.md | Third-party Actions | āļāļēāļĢāđāļāđāļāļēāļ third-party actions āļāļĒāđāļēāļāļāļĨāļāļāļ āļąāļĒ | gha- | āđāļĄāļ·āđāļāđāļāđ third-party actions |
| 3 | HIGH | workflow-security.md | Workflow Security | āļāļ§āļēāļĄāļāļĨāļāļāļ āļąāļĒāļāļāļ workflows | gha- | āđāļĄāļ·āđāļāļŠāļĢāđāļēāļ workflows |
| 4 | MEDIUM | performance-optimization.md | Performance Optimization | āļāļēāļĢāļāļĢāļąāļāļāļĢāļļāļāļāļĢāļ°āļŠāļīāļāļāļīāļ āļēāļ | gha- | āđāļĄāļ·āđāļ optimize workflows |
| 5 | MEDIUM | self-hosted-runners.md | Self-hosted Runners | āļāļēāļĢāļāļąāļāļāļēāļĢ self-hosted runners | gha- | āđāļĄāļ·āđāļāđāļāđ self-hosted runners |
| Reference | Name | Description | Prefix |
|---|
āđāļāđāļĨāļ°āđāļāļĨāđ Rule āļāļĢāļ°āļāļāļāļāđāļ§āļĒ:
āđāļāđāļĨāļ°āđāļāļĨāđ Knowledge āļāļĢāļ°āļāļāļāļāđāļ§āļĒ:
āđāļāđāļĨāļ°āđāļāļĨāđ Rule āļāļāļīāļāļēāļĒāļāļķāļ:
āđāļāđāļĨāļ°āđāļāļĨāđ Knowledge āļāļāļīāļāļēāļĒāļāļķāļ: