How does this skill handle GitHub Action security?

It enforces input validation to prevent command injection, guides you on setting minimal GITHUB_TOKEN permissions, and ensures sensitive data is masked using core.setSecret.

Can I use this to troubleshoot failing workflows?

Absolutely. It assists in debugging runner logs, resolving permission issues, and fixing environment-specific failures in Docker or Node.js environments.

Which action types are supported by this skill?

The skill supports all three primary types: JavaScript (Node.js), Docker container, and Composite actions.

Can this skill help me publish to the GitHub Marketplace?

Yes, it provides checklists for metadata, branding, licensing, and semantic versioning required for a successful Marketplace release.

GitHub Actions Assistant

Name: GitHub Actions Assistant
Author: vinnie357

byvinnie357

部署与 DevOps

Develops, optimizes, and secures custom GitHub Actions using JavaScript, Docker, or composite structures for automated CI/CD workflows.

关于

This skill provides specialized expertise for the entire lifecycle of GitHub Action development, from initial scaffolding and metadata configuration to advanced toolkit integration and Marketplace publishing. It guides users through creating JavaScript, Docker, and Composite actions while enforcing strict security standards like input sanitization and minimal permission scoping. Whether you are troubleshooting runner execution, implementing the @actions/github toolkit, or managing semantic versioning for public releases, this skill ensures your automation is robust, performant, and compliant with GitHub's best practices.

主要功能

Enforces security best practices for secret masking and token permissions
Provides guidance for GitHub Marketplace publishing and version management
Automates action.yml metadata generation and schema validation
Supports JavaScript, Docker, and Composite action architectures
Implements GitHub Actions Toolkit (@actions/core, @actions/github, @actions/exec)
0 GitHub stars

使用场景

Optimizing action performance and securing workflows against command injection
Converting complex shell scripts into reusable Composite actions for organization-wide use
Building custom JavaScript actions to automate repository management tasks

关于

主要功能

Enforces security best practices for secret masking and token permissions
Provides guidance for GitHub Marketplace publishing and version management
Automates action.yml metadata generation and schema validation
Supports JavaScript, Docker, and Composite action architectures
Implements GitHub Actions Toolkit (@actions/core, @actions/github, @actions/exec)
0 GitHub stars

使用场景

Optimizing action performance and securing workflows against command injection
Converting complex shell scripts into reusable Composite actions for organization-wide use
Building custom JavaScript actions to automate repository management tasks