skill CX Codex

github-actions · wendylabsinc — Claude Code skill: CI workflow rules

Q: How do I install the github-actions skill in Claude Code?

Run `npx skills add wendylabsinc/claude-skills --skill github-actions -a claude-code`. The skill lands at `~/.claude/skills/github-actions/SKILL.md`.

A skill that steers the agent through GitHub Actions authoring: vendor actions over shell scripts, verified versions, minimal job permissions.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add wendylabsinc/claude-skills --skill github-actions -a claude-code

Open on GitHub

What github-actions does

The skill fires on anything inside .github/workflows/: a test job, a release pipeline, a deploy. Its first rule is to reach for an existing action rather than write shell in run:. Checkout, image build and push, artifact upload, releases are all covered by vendor actions under actions/* and docker/*. A hand-rolled step needs a stated reason in the pull request.

Versions are the part it refuses to do from memory. Before pinning, the agent runs gh api repos/actions/checkout/releases/latest --jq .tag_name for every action in the file and uses what comes back. The normal pin is a major tag. A commit SHA goes in when the job carries production credentials. If gh is not logged in, only the releases page is left to check by hand.

Access is scoped tight. Each job gets an explicit permissions: block, starting at contents: read with id-token: write added where OIDC is in play. Cloud login runs through OIDC federation. Long-lived cloud keys sitting in secrets are out. The checklist also asks for a concurrency: group on deploys and split triggers: default branch to dev, v* tags to production.

What it helps with

write a deploy workflow in .github/workflows/ without shell workarounds
check the latest major of an action before pinning it
trim job permissions to what the job actually uses
move cloud auth off stored keys onto OIDC
split deploy triggers between branch and tag

Example prompts for the agent

Draft .github/workflows/ci.yml with tests on pull requests and a release on v* tags.
Review this workflow PR: are the action versions current and the permissions minimal?
Switch the GCP auth step to OIDC and drop credentials_json.

How to install github-actions

1Skills CLI (Vercel)

npx skills add wendylabsinc/claude-skills --skill github-actions -a claude-code

2Manually: put the files in place

~/.claude/skills/github-actions/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/github-actions/

1Skills CLI (Vercel)

npx skills add wendylabsinc/claude-skills --skill github-actions -a codex

2Manually: put the files in place

.agents/skills/github-actions/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add wendylabsinc/claude-skills --skill github-actions -a cursor

2Manually: put the files in place

.cursor/skills/github-actions/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install wendylabsinc/claude-skills github-actions

2Manually: put the files in place

.github/skills/github-actions/SKILL.md

1Skills CLI (Vercel)

npx skills add wendylabsinc/claude-skills --skill github-actions -a gemini-cli

2Platform CLI

gemini skills install https://github.com/wendylabsinc/claude-skills --path github-actions

Manually: put the files in place

.devin/skills/github-actions/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add wendylabsinc/claude-skills --skill github-actions -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about github-actions

How do I install the github-actions skill in Claude Code?

Run npx skills add wendylabsinc/claude-skills --skill github-actions -a claude-code. The skill lands at ~/.claude/skills/github-actions/SKILL.md.

What does the github-actions skill do?

It gives the agent a set of workflow rules: use maintained actions instead of shell, verify tags before pinning, keep permissions: minimal and authenticate to clouds through OIDC.

Why verify action versions with gh api?

The agent's idea of the current major goes stale, so it checks with gh api repos/<owner>/<repo>/releases/latest --jq .tag_name while the workflow is being written.

github-actions by other authors comes first.

github-actions callstackincubator Reusable GitHub Actions patterns to build React Native apps for iOS simulators and Android emulators in the cloud and download artifacts. Simplifies CI pipeline setup and scripted retrieval via gh CLI or REST API. CX Codex +1 10,900installs github-actions devops-skills A skill that gets your agent writing GitHub Actions workflows: builds, tests, deploys, secrets, caching and self-hosted runners. CX Codex +1 388installs github-actions bobmatnyc A reference skill for GitHub Actions CI/CD workflows. Helps configure automated builds, test pipelines, and deployments in repository YAML files. CX Codex +1 758installs github-actions tartinerlabs Writes and audits GitHub Actions workflows: pins actions to SHAs, tightens permissions, catches stale Node versions. CX Codex +1 403installs wizard Matt Pocock This skill creates an interactive bash wizard for manual setup steps, CI secrets, third-party dashboards, and one-off migrations. 553,369installs hyperframes-cli heygen-com Controls HyperFrames video workflows from the CLI: audits layouts and contrast, edits timeline clips, captures snapshots, and renders locally or in cloud runtimes. CX Codex +1 1,300,000installs setup-pre-commit Matt Pocock This skill configures pre-commit checks for a JavaScript repository, running Prettier, type checking, and tests before each commit. 489,289installs using-git-worktrees Jesse Vincent Prepares an isolated workspace before feature work or plan execution. It checks the repository first, then uses native worktree support or Git. CX Codex 217,153installs finishing-a-development-branch Jesse Vincent This skill checks the test suite and guides branch completion: merge locally, open a Pull Request, or leave the work in place. CX Codex 214,439installs orca-cli stablyai The skill lets an agent manage Orca worktrees, terminals, artifacts and the built-in browser through the orca CLI. Useful when your work already runs inside Orca. CX Codex +1 354,000installs

From the same set7

wendy-self-hosted A rule for agents touching Wendy interop code: the wendyos and wendy-agent stack has to run without the SaaS side. Useful for on-prem and airgapped setups. CX Codex +1 ★ 62repo stars wendy-iterating Runs a find-fix-ship loop: each change gets its own worktree, a subagent carries it to green CI, and the loop stops itself when nothing is left. CX Codex +1 ★ 62repo stars wendy-device-enrollment Walks your agent through first-touch enrollment of WendyOS devices in pki-core and the certificate lifecycle that follows. CX Codex +1 ★ 62repo stars wendy-cloud-iterate Runs the Wendy Cloud dev stack end to end: brings up Docker and the Swift broker, runs integration tests, reads the failures and edits code. CX Codex +1 ★ 62repo stars swift-library-design Guides public API design for Swift libraries and frameworks: protocols, result builders, inlining, noncopyable types. CX Codex +1 ★ 62repo stars postgres-nio A skill that gives the agent a working reference for talking to PostgreSQL from Swift with postgres-nio: connections, pooling, prepared statements and COPY FROM. CX Codex +1 ★ 62repo stars