GitHub Actions

What it does

This skill teaches an agent to create, configure, troubleshoot, and publish GitHub Actions. It covers JavaScript-based actions, Docker container actions, and composite actions, including project structure, action.yml metadata, inputs/outputs, packaging (ncc bundling), and runtime considerations. The skill also includes practical snippets for reading inputs, setting outputs, using @actions/core and @actions/github, and examples for Dockerfiles and composite workflows. Security practices (least-privilege tokens, secret masking, dependency audits) and marketplace publishing steps are described.

When to use it

Use this skill whenever the agent needs to: develop or review a custom GitHub Action, prepare an action for the Marketplace, configure action metadata or inputs/outputs, troubleshoot failing workflows, harden action permissions and secrets, or optimize action performance and caching. It is especially useful during CI/CD setup, publishing releases, or when advising on action security.

What's included

• Scripts: none detected (has_scripts=false)
• References: none detected (has_references=false)
• Instructions: detailed procedural guidance on action types (JavaScript, Docker, composite), example action.yml manifests, sample Dockerfile, code snippets for inputs/outputs and Octokit usage, and security best practices such as input validation, token permissions, and dependency auditing.

Compatible agents

Likely useful for agents with code-analysis and repository access capabilities (e.g., Claude Code, Copilot-style assistants, or any agent able to read/write repository files and run CLI tests).