skills.rest
kaushal-waygood
kaushal-waygoodCOMMUNITY
Explore all skills by this author →
GitHub

developer

Document developer instructions and implementation guidelines for GitHub Agentic Workflows.

Updated Feb 26, 2026
Search Tags:#testing#security#github#validation#agentic-workflows#code-organization#safe-outputs
One-click install
npx skills add https://github.com/kaushal-waygood/agentic-self-healing-ci --skill developer-kaushal-waygood
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: developer
Source: https://github.com/kaushal-waygood/agentic-self-healing-ci/tree/main/skills/developer
Command: npx skills add https://github.com/kaushal-waygood/agentic-self-healing-ci --skill developer-kaushal-waygood

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This document consolidates development guidelines, validation patterns, and security guardrails to reduce fragmentation and unsafe practices when building and maintaining GitHub Agentic Workflows.

Core Features & Use Cases

  • Code Organization: Recommended file, helper, and module patterns to keep the codebase modular and maintainable.
  • Validation Architecture: Centralized and domain-specific validation strategies to ensure workflow correctness and expression safety.
  • Security Best Practices: Template injection prevention, supply chain pinning, minimal permissions, and shell scripting guidance to harden workflows.
  • Safe Outputs & Testing: Patterns for safe API write operations, static analysis integration, and test organization for reliable CI.
  • Use Case: A maintainer refactors a large frontmatter parser into multiple focused modules, adds validation checks, and pins Actions to SHAs following the guidelines.

Quick Start

Read the Developer Instructions and apply the Code Organization and Security Best Practices sections to audit or extend an agentic workflow implementation.

Frequently Asked Questions about developer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure GitHub agentic workflows against template injection?▼

Organize agentic workflows by refactoring large parsers into focused modules, applying centralized validation strategies, and pinning GitHub Actions to SHAs to ensure correctness and maintainability.

What are the best practices for safe output handling in agentic workflows?▼

Safe output handling in agentic workflows requires patterns for secure API write operations, static analysis integration, and structured test organization to ensure reliable CI execution.

How does validation architecture work for GitHub workflow expressions?▼

Validation architecture for GitHub workflow expressions uses centralized, domain-specific validation strategies to ensure workflow correctness, structural safety, and reliable frontmatter parsing.

Do I need to pin GitHub Actions dependencies for agentic workflows?▼

Pinning GitHub Actions dependencies to SHAs is required for supply chain security in agentic workflows, preventing unauthorized updates and ensuring reproducible CI builds.

How to organize files and modules when maintaining agentic workflows?▼

Maintain agentic workflows by organizing files, helpers, and modules into modular patterns, refactoring large parsers into focused components to keep the codebase maintainable during development.

Related Skills

Explore More Software Engineering Skills→
MossakaMossaka

gh-aw-test-repos

Fork and initialize OSS repositories for testing GitHub Agentic Workflows.

Community
Intermediate
dr-codedr-code

release-check

Run pre-release verification checks and write a versioned release assessment report.

Community
Advanced
n-marusovn-marusov

aif-ci

Generate CI/CD pipeline configurations for GitHub Actions or GitLab CI.

Community
Advanced
apacheapache
79

magpie-workflow-security-audit

Audit GitHub Actions workflows for security vulnerabilities and remediation suggestions.

Official
Advanced