What problem does it solve? Setting up a secure CI/CD pipeline to publish an npm package to AWS CodeArtifact from GitHub Actions requires careful OIDC configuration, workflow permissions, and validation logic that is easy to get wrong. This Skill generates the complete workflow file without relying on long-lived AWS access keys. ## Core Features & Use Cases - Workflow Generation: Creates .github/workflows/ci.yml with OIDC-based AWS authentication using aws-actions/configure-aws-credentials@v4 and id-token: write permissions. - Package Validation: Adds a validation job that checks pack.yaml fields, verifies every skills/*/SKILL.md has matching name and description frontmatter, and runs npm pack --dry-run. - Secure Publishing: Adds a publish job restricted to pushes on the default branch that runs aws codeartifact login and publishes from the package directory. - Use Case: A team maintaining an AI toolkit monorepo needs to publish their package to a private CodeArtifact repository on every merge to main, without storing AWS credentials in GitHub secrets. ## Quick Start Ask the assistant to run the setup-cicd skill to generate the GitHub Actions workflow that validates and publishes the ai-toolkit package to AWS CodeArtifact using OIDC.
