How does this skill handle GitHub Action security?

It enforces input validation to prevent command injection, guides you on setting minimal GITHUB_TOKEN permissions, and ensures sensitive data is masked using core.setSecret.

Can I use this to troubleshoot failing workflows?

Absolutely. It assists in debugging runner logs, resolving permission issues, and fixing environment-specific failures in Docker or Node.js environments.

Which action types are supported by this skill?

The skill supports all three primary types: JavaScript (Node.js), Docker container, and Composite actions.

Can this skill help me publish to the GitHub Marketplace?

Yes, it provides checklists for metadata, branding, licensing, and semantic versioning required for a successful Marketplace release.

GitHub Actions Assistant

Name: GitHub Actions Assistant
Author: vinnie357

byvinnie357

0•

Deployment & DevOps

Develops, optimizes, and secures custom GitHub Actions using JavaScript, Docker, or composite structures for automated CI/CD workflows.

This skill provides specialized expertise for the entire lifecycle of GitHub Action development, from initial scaffolding and metadata configuration to advanced toolkit integration and Marketplace publishing. It guides users through creating JavaScript, Docker, and Composite actions while enforcing strict security standards like input sanitization and minimal permission scoping. Whether you are troubleshooting runner execution, implementing the @actions/github toolkit, or managing semantic versioning for public releases, this skill ensures your automation is robust, performant, and compliant with GitHub's best practices.

Key Features

01Enforces security best practices for secret masking and token permissions

02Provides guidance for GitHub Marketplace publishing and version management

03Automates action.yml metadata generation and schema validation

04Supports JavaScript, Docker, and Composite action architectures

05Implements GitHub Actions Toolkit (@actions/core, @actions/github, @actions/exec)

060 GitHub stars

Use Cases

01Optimizing action performance and securing workflows against command injection

02Converting complex shell scripts into reusable Composite actions for organization-wide use

03Building custom JavaScript actions to automate repository management tasks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add vinnie357/claude-skills actions

For use in Claude.ai and ChatGPT

Download Skill