Menu
Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Update acceptance evidence only from verified behavior.
Design backend API contracts that remain stable across dashboard and worker callers.
Define the data, API, UI, state, security, tests, and rollback contract before queued work begins.
Enforce Captain-only merge criteria before any integration action.
Classify failing checks and assign the correct specialist stage.
Acquire and release file-lane claims before mutating automation-controlled branches.
| name | github-actions-permissions |
| description | Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access. |
contents: read and pull-requests: read.pull_request_target without explicit threat modeling.