Skip to main content

github-actions

Use when: write or review GitHub Actions workflows that are fast, secure, and maintainable.

Source facts

Repository
kimtth/agent-skill-100-lines-or-less
Last source activity
June 26, 2026 at 02:15
Detected SKILL.md language
English
Stars
2
Forks
0

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

Showing SKILL.md

SKILL.md
Source instructions · Read-only preview
name
github-actions
description
Use when: write or review GitHub Actions workflows that are fast, secure, and maintainable.
Goal: CI workflows that are quick, least-privileged, and reliable. Use for: - authoring workflows for build, test, and release - speeding up slow or flaky Actions runs - hardening workflow permissions and secrets Workflow: 1. Trigger on the right events with path and branch filters. 2. Set least-privilege permissions for GITHUB_TOKEN. 3. Cache dependencies and reuse setup across jobs. 4. Parallelize with a matrix; fail fast where useful. 5. Pin third-party actions to a commit SHA. 6. Use secrets via the secrets context, never echoed. Practices: - minimal permissions block per workflow/job - matrix builds for versions and platforms - concurrency groups to cancel superseded runs - reusable workflows for shared logic Rules: - pin actions by SHA; do not trust mutable tags - grant the token the least access needed - never print secrets; mask sensitive output - keep workflows fast with caching and concurrency control
View on GitHub