cicd-review

Review GitHub Actions workflows for deployment safety and rollback readiness.

6|1|Updated Mar 30, 2026
One-click install
npx skills add https://github.com/wesleyosantos91/multi-agents --skill cicd-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cicd-review
Source: https://github.com/wesleyosantos91/multi-agents/tree/main/devin/.devin/skills/cicd-review
Command: npx skills add https://github.com/wesleyosantos91/multi-agents --skill cicd-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill prevents fragile or insecure CI/CD pipelines by identifying gaps in workflow design, deployment safety, and cloud access patterns before changes reach production.

Core Features & Use Cases

  • End-to-end pipeline review: Evaluates GitHub Actions workflows for job structure, caching, parallelization, and secret handling.
  • Deployment strategy validation: Checks Lambda deployment approaches such as versions/aliases and rollout patterns like blue/green or canary.
  • IaC and quality gate checks: Reviews Terraform usage in CI (plan vs apply, and state management) and confirms lint/test/scan/build gates.
  • Safe AWS operations: Verifies rollback readiness via CodeDeploy + CloudWatch Alarm and enforces OIDC for AWS without long-lived credentials.
  • Environment promotion consistency: Ensures repeatable promotion across dev → staging → prod.

Quick Start

Ask the AI to run a CI/CD pipeline review for all GitHub Actions workflows in .github/workflows/.

Frequently Asked Questions about cicd-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit GitHub Actions workflows for deployment risk and security gaps?

A CI/CD pipeline review checks GitHub Actions workflow structure, caching, parallelism, and secret management to reduce deployment risk. It validates Terraform CI practices, AWS Lambda deployment strategies, and OIDC authentication to prevent operational fragility.

What's the best way to configure OIDC for AWS authentication in GitHub Actions without long-lived credentials?

Configuring OIDC for AWS authentication requires validating your GitHub Actions workflows to ensure no long-lived credentials are used. This Skill verifies safe AWS operations by enforcing OIDC-based authentication and checking rollback readiness via CodeDeploy and CloudWatch Alarms.

How do I validate AWS Lambda deployment strategies and automated rollback in CI/CD?

Validating AWS Lambda deployment strategies involves checking versions, aliases, and rollout patterns like blue/green or canary. This Skill verifies rollback readiness via CodeDeploy and CloudWatch Alarms to ensure safe, automated recovery during failed deployments.

Can I review Terraform plan and apply practices within my CI/CD pipeline?

Yes, reviewing Terraform usage in CI involves evaluating plan versus apply stages and state management. This Skill reviews IaC practices within your pipeline and confirms lint, test, scan, and build quality gates are properly configured before deployment.

Does this CI/CD review check environment promotion consistency across dev, staging, and prod?

Yes, environment promotion consistency is evaluated to ensure repeatable promotion across dev, staging, and prod. This Skill checks that your GitHub Actions workflows maintain consistent deployment patterns and safety gates throughout all environment transitions.