gh-aw

Create and maintain secure GitHub Agentic Workflows for Prowler.

1|Updated Aug 16, 2025
One-click install
npx skills add https://github.com/professor-moody/cloud-tools --skill gh-aw-professor-moody
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gh-aw
Source: https://github.com/professor-moody/cloud-tools/tree/main/repos/prowler/skills/gh-aw
Command: npx skills add https://github.com/professor-moody/cloud-tools --skill gh-aw-professor-moody

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill streamlines the creation, management, and debugging of GitHub Agentic Workflows (gh-aw), ensuring secure and efficient automation within your GitHub repositories.

Core Features & Use Cases

  • Workflow Creation & Modification: Define and update agentic workflows, including frontmatter, safe outputs, and agent imports.
  • Security Hardening: Enforces best practices for permissions, network access, threat detection, and lockdown modes.
  • Debugging & Compilation: Assists in compiling workflows and diagnosing compilation errors.
  • Use Case: When setting up a new CI/CD pipeline using GitHub Actions, use this Skill to generate the initial workflow file, configure security settings, and ensure it correctly imports the necessary agent personas.

Quick Start

Use the gh-aw skill to compile the workflow file located at .github/workflows/my-workflow.md.

Frequently Asked Questions about gh-aw

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create secure GitHub Actions workflows for agentic workflows?

To create secure GitHub Actions workflows for agentic workflows, define the workflow file with frontmatter, configure safe outputs, and enforce read-only permissions with explicit network access. This ensures efficient and secure CI/CD pipeline automation within your repositories.

What are GitHub Agentic Workflows and when do I need safe-output configuration?

GitHub Agentic Workflows are automated CI/CD processes using agent personas. You need safe-output configuration when defining workflows to enforce security best practices, ensuring that workflow compilation and agent imports do not expose sensitive data or pipeline vulnerabilities.

How do I debug compilation errors in GitHub Actions workflow files?

To debug compilation errors in GitHub Actions workflow files, compile the target workflow file and diagnose the output for frontmatter modification issues or incorrect agent imports. Ensure MCP server setup and threat detection mechanisms are correctly configured to isolate the failure.

Does GitHub Actions support read-only permissions and threat detection for CI/CD?

Yes, GitHub Actions supports read-only permissions and threat detection for CI/CD pipelines. You can enforce security hardening by applying explicit network access rules, lockdown modes, and threat detection mechanisms directly within your agentic workflow definitions.

Why is my GitHub Actions workflow compilation failing after modifying frontmatter?

GitHub Actions workflow compilation fails after modifying frontmatter due to incorrect safe-output configuration or invalid Copilot Custom Agent imports. Diagnose the compilation errors by verifying the MCP server setup and ensuring frontmatter meets security lockdown requirements.