Github actions
Skill kimtth/agent-skill-100-lines-or-less/skills/github-actions
Use when: write or review GitHub Actions workflows that are fast, secure, and maintainable.From its SKILL.md
npx -y skills add kimtth/agent-skill-100-lines-or-less --skill github-actionsAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.0 KB, 200 tokens by cl100k_base, as published. Nobody here has run it
Goal: CI workflows that are quick, least-privileged, and reliable.
Use for:
- authoring workflows for build, test, and release
- speeding up slow or flaky Actions runs
- hardening workflow permissions and secrets
Workflow:
- Trigger on the right events with path and branch filters.
- Set least-privilege permissions for GITHUB_TOKEN.
- Cache dependencies and reuse setup across jobs.
- Parallelize with a matrix; fail fast where useful.
- Pin third-party actions to a commit SHA.
- Use secrets via the secrets context, never echoed.
Practices:
- minimal permissions block per workflow/job
- matrix builds for versions and platforms
- concurrency groups to cancel superseded runs
- reusable workflows for shared logic
Rules:
- pin actions by SHA; do not trust mutable tags
- grant the token the least access needed
- never print secrets; mask sensitive output
- keep workflows fast with caching and concurrency control
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.