What problem does it solve?
Helps developers and reviewers author, audit, and operate GitHub repositories and Actions workflows with secure defaults and practical CLI usage, reducing misconfigurations, leaked secrets, and brittle CI runs.
Core Features & Use Cases
- Workflow hardening: Guidance on minimal permissions, secrets handling, pull_request_target risks, and pinning third-party actions to reduce supply-chain risk.
- gh CLI operations: Reference for repo/PR/issue/run/secret commands and machine-friendly output for automation.
- Performance & maintainability: Patterns for caching, concurrency, path filters, and splitting workflows for clarity and cost control.
Quick Start
Use the gh skill to review a repository's .github/workflows YAML for least-privilege permissions, secrets safety, and pinned action usage.