菜单
Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Update acceptance evidence only from verified behavior.
Design backend API contracts that remain stable across dashboard and worker callers.
Define the data, API, UI, state, security, tests, and rollback contract before queued work begins.
Enforce Captain-only merge criteria before any integration action.
Classify failing checks and assign the correct specialist stage.
Acquire and release file-lane claims before mutating automation-controlled branches.
基于 SOC 职业分类
| name | github-actions-permissions |
| description | Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access. |
contents: read and pull-requests: read.pull_request_target without explicit threat modeling.