What problem does it solve?
This Skill eliminates the risk of silent, hard-to-detect bugs in GitHub Actions workflows that cause CI gates to skip, fail unexpectedly, or introduce security vulnerabilities like shell injection, which can lead to broken merge pipelines and unreviewed security flaws.
Core Features & Use Cases
- Expression Safety: Prevents silent failures from using non-existent GitHub Actions expression functions like toLower or replace, with workarounds for common string manipulation needs.
- Secure Run Steps: Provides guidance for handling multi-line step outputs correctly and preventing shell injection from untrusted PR or event data.
- Correct CI Trigger Configuration: Ensures draft pull request required gates run when PRs are marked ready for review, avoiding hollow green mergeable states.
- Rate Limit Resilience: Includes patterns for handling GitHub GraphQL rate limits to prevent workflow failures during high-volume API usage.
Use Case: When your team's deployment workflow is skipping required security checks for draft PRs marked ready for review, use this Skill to identify and fix the missing trigger configuration.
Quick Start
Use the github-actions skill to review your new GitHub Actions workflow for common silent bugs and security gaps before merging the pull request.
