Can this skill automatically fix security vulnerabilities?

Yes, it provides implementation patterns for using GitHub Copilot Autofix and CodeQL to identify and resolve security issues like SQL injection or command injection.

How does this skill handle Windows file paths?

The skill strictly enforces the use of backslashes (\) for all file operations on Windows systems to ensure compatibility with local environment tools.

What is Trunk-Based Development (TBD)?

TBD is a version control strategy where developers merge small, frequent updates to a single core branch, reducing merge conflicts and enabling continuous deployment.

Does it create excessive documentation files?

No, it follows a strict 'clean repository' policy, prioritizing updates to existing README.md files rather than creating new documentation unless explicitly requested.

GitHub AI & Security Workflows 2025

Name: GitHub AI & Security Workflows 2025
Author: JosiahSiegel

byJosiahSiegel

•

Seguridad y Pruebas

Implements high-velocity trunk-based development and AI-driven security scanning for modern GitHub repositories.

This skill equips Claude with specialized knowledge for managing 2025-era GitHub workflows, focusing on Trunk-Based Development (TBD) to minimize merge conflicts and maximize deployment frequency. It integrates GitHub Advanced Security features, including AI-powered secret protection, automated CodeQL scanning, and Copilot Autofix remediation. Beyond security, the skill facilitates the use of GitHub Agents for automated bug fixing and PR generation while enforcing platform-specific best practices, such as mandatory Windows backslash formatting and strict documentation hygiene to keep repository roots clean.

Características Principales

01AI-enhanced dependency review and license compliance

02GitHub AI Agents for automated bug triage and PRs

03AI-powered secret protection and push-blocking setup

047 GitHub stars

05Automated CodeQL security scanning and Copilot Autofix

06Trunk-Based Development (TBD) workflow implementation

Casos de Uso

01Automating security vulnerability detection and remediation using GitHub's AI-powered toolchain.

02Transitioning a repository to high-frequency trunk-based development with short-lived branches.

03Setting up AI-driven GitHub Actions for automated pull request generation and dependency monitoring.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add josiahsiegel/claude-plugin-marketplace github-ai-features-2025

For use in Claude.ai and ChatGPT

Download Skill