What is the difference between this and standard workflows?

Standard workflows handle builds and deployments, while this skill installs Claude-powered analysis workflows that use AI to reason about security, accessibility, and code quality.

How do I customize the scanning behavior?

Once installed, you can edit the generated YAML files in .github/workflows to adjust 'file-patterns', 'max-turns' for analysis depth, or 'fail-on' thresholds.

What secrets are required to use these workflows?

You must configure a CLAUDE_CODE_OAUTH_TOKEN in your GitHub repository secrets for the workflows to authenticate with Anthropic's services.

Can I install only specific types of checks?

Yes, you can use the --security, --quality, or --a11y flags to install only the workflow categories relevant to your project.

Claude Reusable GitHub Workflows

Name: Claude Reusable GitHub Workflows
Author: laurigates

bylaurigates

•

Deployment & DevOps

Automates the installation of Claude-powered GitHub Actions for advanced security, quality, and accessibility auditing.

This skill streamlines the setup of sophisticated CI/CD pipelines by installing reusable workflow callers from the claude-plugins repository. It leverages Claude's reasoning capabilities to perform deep-dive analysis on your codebase, covering critical areas like OWASP security vulnerabilities, secret detection, TypeScript quality, and WCAG accessibility compliance. Instead of writing complex YAML from scratch, developers can bootstrap a complete suite of AI-driven checks that integrate directly into GitHub pull requests.

Key Features

01Automates OWASP Top 10 scanning and secret leak detection

0210 GitHub stars

03Supports granular installation via category-specific flags

04Installs pre-configured GitHub Actions callers for security, quality, and accessibility

05Performs deep code smell analysis and async/await pattern validation

06Validates frontend components against WCAG 2.1 and ARIA standards

Use Cases

01Hardening repository security by adding automated vulnerability and secret scanning to pull requests

02Enforcing high code quality in TypeScript projects through automated pattern analysis

03Ensuring frontend accessibility standards are met automatically during the CI/CD cycle

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add laurigates/claude-plugins configure-reusable-workflows

For use in Claude.ai and ChatGPT

Download Skill