What problem does it solve? GitHub Actions secrets and variables fail silently when set at the wrong scope or referenced with the wrong context, producing empty values in CI with no error message. This Skill provides the scope hierarchy rules, CLI commands, and diagnostic workflow needed to set, list, and debug secrets and variables correctly. ## Core Features & Use Cases - Scope Management: Set and list secrets/variables at organization, repository, and environment levels using the correct gh secret and gh variable flags. - Context Disambiguation: Clarifies the difference between secrets.*, vars.*, env.*, and github.token workflow contexts so values resolve correctly. - Failure Diagnosis: A step-by-step checklist for debugging empty secret values, covering missing environment: declarations, scope shadowing, org visibility allow lists, and fork PR restrictions. - Use Case: A deploy workflow prints an empty PROD_DB_PASSWORD. Use this Skill to identify that the job is missing environment: production, add it, and verify the secret exists with gh secret list --env production. ## Quick Start Ask the agent to set the GitHub secret NPM_TOKEN at the repository level and verify it exists before updating the release workflow.
