Ground GitHub Actions Answers in Official Docs
GitHub Actions changes quickly, and stale workflow advice can mislead users. This skill routes questions to official GitHub documentation and produces docs-grounded guidance.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "github-actions-docs" from https://skillstore.io/skills/xixu-me-github-actions-docs.md and its manifest at https://skillstore.io/api/skills/xixu-me-github-actions-docs/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "github-actions-docs". How should I authenticate deployments from GitHub Actions to a cloud provider?
Expected outcome:
Using "github-actions-docs". What is the difference between reusable workflows and composite actions?
Expected outcome:
Using "github-actions-docs". Where can I find official guidance for a GitLab CI/CD migration?
Expected outcome:
The response should point to GitHub Actions migration pages, then summarize the GitLab CI/CD migration guide and related workflow syntax references.
The flagged env_access and external_commands items are Markdown references to GitHub Actions topics, inline code, or related skills. The only URL points to official GitHub documentation, and no prompt injection or data exfiltration intent was found.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/xixu-me-github-actions-docs/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/xixu-me-github-actions-docs?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/xixu-me-github-actions-docs?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xixu-me-github-actions-docs/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/xixu-me-github-actions-docs.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>xixu-me. (2026). github-actions-docs security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/xixu-me-github-actions-docs/audits/5@techreport{xixu-me-xixu-me-github-actions-docs-2026,
author = {xixu-me},
title = {github-actions-docs security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/xixu-me-github-actions-docs/audits/5},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "github-actions-docs security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "xixu-me"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/xixu-me-github-actions-docs/audits/5"
identifiers:
- type: other
value: "skillstore:xixu-me-github-actions-docs:audit:5"
description: "Skillstore immutable audit report identifier"
Find the right official page for triggers, jobs, matrices, expressions, and workflow structure.
Route security questions to GitHub docs for secrets, GITHUB_TOKEN, OIDC, and artifact attestations.
Locate migration guides for teams moving from Jenkins, CircleCI, GitLab CI/CD, Travis CI, or Azure Pipelines.
Use official GitHub Actions docs to explain the main parts of a workflow file for a new project.
Find the official GitHub Actions documentation for matrix builds and summarize the key rules I should follow.
Compare reusable workflows and composite actions using official GitHub Actions docs, including when each option fits best.
Build a docs-grounded migration plan from Jenkins to GitHub Actions, including runner, secrets, and OIDC considerations.
Author
xixu-meLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
64ca8af0f54a325752f08bd54e52151061ea659a
Maintenance freshness
7/20/2026
Usage
13 downloads · 87 views
File structure
Manage Agent Skills with the Skills CLI
Finding and maintaining agent skills can be slow across tools and machines. This skill guides discovery, installation, updates, backups, and troubleshooting with the skills CLI.
Coach Open Source Project Maintainers
Open source maintainers often need focused advice without reading every guide. This skill maps each situation to official guides and practical next steps.
Manage tzst Archives from the CLI
Archive workflows can fail when flags, filters, or conflict rules are unclear. This skill gives focused tzst CLI guidance for safe extraction, automation, and installation.
Harden Linux Web Hosting Safely
Linux hosting setup can lock users out or expose services when steps are rushed. This skill guides ordered SSH, firewall, Nginx, DNS, and TLS changes with validation gates.
Develop Userscripts for Tampermonkey and ScriptCat
Userscripts often fail because metadata, permissions, and runtime behavior do not match. This skill guides Claude, Codex, and Claude Code through portable Tampermonkey and ScriptCat development.
Localize README Files Safely
README translation often breaks links, badges, code examples, and anchors. This skill guides Claude, Codex, and Claude Code to create localized README variants while preserving repository mechanics.
Automate DevOps Pipelines and Deployments
by alirezarezvani
DevOps work often requires repeatable pipeline, infrastructure, and deployment patterns. This skill provides scripts and reference guides for CI/CD, IaC, deployment, and operations review.
Coordinate Cloud DevOps Workflows
by sickn33
Cloud delivery work often spans many tools and phases. This skill organizes infrastructure, CI/CD, Kubernetes, monitoring, security, costs, and recovery work into clear prompts.
Build Terraform Infrastructure Workflows
by sickn33
Terraform work often spans setup, modules, state, environments, pipelines, and security controls. This skill organizes those steps into a clear infrastructure workflow.
Coordinate DevOps Delivery
by Brownbull
DevOps work often spans pipelines, infrastructure, monitoring, and deployment decisions. This skill organizes those tasks into checklists, handoffs, and rollout plans.
Build Governed Incident Command Packets
by yaojingang
Incident response notes often become inconsistent, incomplete, and hard to review. This skill turns operational inputs into a governed packet with severity, owners, communications, and review notes.
Build Better Terraform Modules
by sickn33
Terraform projects often grow into inconsistent modules, unclear tests, and risky release workflows. This skill gives Claude, Codex, and Claude Code practical Terraform and OpenTofu patterns for safer infrastructure delivery.