# Automate GitHub Workflows

Manual workflow maintenance slows releases and hides CI failures. This skill helps Claude, Codex, and Claude Code generate, review, and optimize GitHub Actions automation.

## Install

```bash
npx skillstore add dnyoussef/github-workflow-automation
```

## Metadata

- Status: approved
- Slug: dnyoussef-github-workflow-automation
- Version: 1.0.0
- Author version: 1.0.0
- Skillstore revision: r1
- Version status: valid
- Tree hash: d87192e34c9e0ee826c93c4dc2f77f46698a48bc013da6b828b798a07ba2f928
- Author: DNYoussef
- GitHub username: DNYoussef
- License: MIT
- Repository: https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/github-workflow-automation
- Ref: c579efd02184f1128d6741d16e6c8d951d7d4208
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem, env\_access
- Quality score: 70
- Public page: https://skillstore.pages.dev/skills/dnyoussef-github-workflow-automation
- Manifest: https://skillstore.pages.dev/api/skills/dnyoussef-github-workflow-automation/manifest

## Capabilities

- Generate GitHub Actions workflow examples for CI, security scanning, releases, and deployments.
- Suggest pipeline optimizations for caching, parallel execution, test selection, and cost reduction.
- Coordinate GitHub CLI workflows for pull requests, issues, releases, and troubleshooting.
- Provide Claude-Flow and ruv-swarm command patterns for multi-agent workflow tasks.
- Document security practices such as OIDC, least-privilege permissions, and GitHub secrets.

## Use Cases

- Design CI/CD Pipelines: Create GitHub Actions workflows for builds, tests, caching, and deployment gates.
- Coordinate Pull Requests: Plan PR validation, review checks, issue updates, and release preparation workflows.
- Improve Workflow Security: Add security scans, least-privilege permissions, secret handling, and audit steps.

## Prompt Templates

### Create a Basic Workflow

```
Create a GitHub Actions CI workflow for this repository. Include build, test, cache, and clear failure reporting steps.
```

### Optimize an Existing Workflow

```
Review my current GitHub Actions workflow and suggest safer caching, parallel jobs, test selection, and cost reductions.
```

### Coordinate a Release

```
Plan a GitHub release workflow with changelog generation, artifact creation, security checks, approvals, and rollback guidance.
```

### Design Self-Healing CI

```
Design a self-healing GitHub Actions process that diagnoses failures, proposes fixes, and waits for approval before repository changes.
```

## Limitations

- Examples require GitHub CLI, git, Node.js, and the listed swarm tools to be installed.
- Generated commands can change repositories and should be reviewed before execution.
- The skill does not verify third-party package integrity or GitHub permission scopes.
- Workflow suggestions still need project-specific testing and approval.

## Best Practices

- Run destructive GitHub operations only after explicit human approval.
- Use least-privilege GitHub permissions and short-lived credentials.
- Pin third-party actions and review generated workflow changes before merging.

## Anti Patterns

- Running auto-execute deployment commands from unreviewed suggestions.
- Giving broad repository tokens to every generated workflow.
- Treating swarm output as authoritative without repository-specific testing.

## Security Audit

- Audited at: 2026-07-05T13:31:17.266\+00:00
- Summary: Static findings were false positives caused by Markdown code fences, workflow examples, documentation links, npm cache paths, and GitHub secret placeholders. No prompt-injection attempt or credential exfiltration intent was found. The main residual risk is that the skill encourages repository-changing GitHub automation that should require explicit approval.

## Stats

- Views: 227
- Downloads: 9
- Favorites: 0
- Popularity score: 0