메뉴
Review GitHub Actions workflows for correctness, security, and maintainability. Use when reviewing GitHub Actions workflow PRs, checking workflow security, evaluating CI/CD pipeline design, or assessing permissions and secret handling.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Review SKILL.md quality for Waza readiness and agent-skills-instructions compliance. Use when evaluating SKILL.md quality, checking compliance with skill authoring standards, preparing skills for release, reviewing skill PRs, or running waza readiness checks.
Survey and update CHANGELOG.md from unreleased commits and undocumented releases (conventional, renovate, chore, pin/finalize subjects, and git tags). Use when the user asks to check, review, or update the changelog, or when automation supplies commit/release detect JSON. Default is survey only; edit CHANGELOG.md only when the user explicitly requests a fix or automation sets may_edit in Constraints.
Triage failing CI on integration branches and/or PR heads, classify failures, apply minimal fixes when actionable. Use when the user asks to triage or fix CI failures, when automation detects failed workflow runs, or when automation supplies detection JSON. Default is survey only; edit files only when the user explicitly requests a fix or automation sets may_edit in Constraints.
Detect documentation drift and patch affected docs — via git diff (hooks, manual) or structured detect JSON from an external caller. Keeps references, links, tables, and nav entries accurate. Use when syncing docs after code changes, before PRs, on doc sync requests, or when automation reports documentation drift. Default is survey only; edit documentation files only when the user explicitly requests a fix or caller constraints allow edits. Not for new document creation (use docs-creator) or markdown linting (use markdown-validation).
Validate GitHub Actions workflows for syntax and security with actionlint, ghalint, and zizmor. Use when committing workflow changes, running CI validation, or checking workflow security issues.
Update PR body content with deterministic baseline sections and optional full-body completion. Use when creating PRs or regenerating template-driven summaries.
| name | github-actions-review |
| description | Review GitHub Actions workflows for correctness, security, and maintainability. Use when reviewing GitHub Actions workflow PRs, checking workflow security, evaluating CI/CD pipeline design, or assessing permissions and secret handling. |
| license | Apache-2.0 |
| metadata | {"author":"y-miyazaki","version":"1.0.1"} |
action.yml) + PR context (required)Return structured Markdown in accordance with references/common-output-format.md.
Minimal inline contract (used if reference file is unavailable):
## Checks Summary
- Total: <n>, Passed: <n>, Failed: <n>, Deferred: <n>
## Checks (Failed/Deferred Only)
| ItemID | Status | Evidence | Fix |
## Issues
1. <ItemID>: <title>
- File: <path>#L<line>
- Problem: <specific>
- Recommendation: <fix>
actionlint, ghalint, zizmor)github-actions-validation for deterministic checkspermissions, secret usage, and external action references.github-actions-validation results are attached. If missing, inform user that validation should run first, then proceed with partial review: evaluate security and permissions checks directly from YAML, defer syntax/lint-dependent checks (mark as Deferred with reason "validation evidence unavailable").SEC-* first, then correctness, then maintainability.| Condition | Severity | Action |
|---|---|---|
github-actions-validation output missing | Recoverable | Defer lint-dependent checks, review security/permissions directly |
common-checklist.md unavailable | Fatal | Stop, report missing dependency |
common-output-format.md unavailable | Recoverable | Use inline output contract |
| PR contains no workflow YAML files | Recoverable | Report "no reviewable workflows" and stop |
Review workflow PR and report failed/deferred checks.## Checks Summary + ## Checks (Failed/Deferred Only) + ## Issues, with each issue including file path, line, and remediation.