richfrem/create-github-action
plugins/agent-scaffolders/skills/create-github-action/SKILL.md
Scaffolds a deterministic GitHub Actions CI/CD workflow YAML. NOT for scaffolding interactive agentic workflows (use `create-agentic-workflow`) and NOT for local event-driven hooks (use `create-hook`).
$ install --global
skillsauthnpx skillsauth add richfrem/agent-plugins-skills create-github-actionInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 13, 2026, 6:02 AM107.7s83 files scanned
SKILL.md
- name:
- create-github-action
- plugin:
- agent-scaffolders
- description:
- >
- argument-hint:
- [workflow-type: test|build|deploy|lint|release|security]
- allowed-tools:
- Bash, Read, Write
Follow the create-github-action skill workflow to scaffold a traditional deterministic
GitHub Actions CI/CD workflow (no AI at runtime).
Inputs
$ARGUMENTS— optional workflow type or purpose (e.g.test,build,deploy,lint,release,security). Omit to start with discovery.
Steps
- If
$ARGUMENTSspecifies a workflow type, use it to seed Phase 1 discovery - Follow the create-github-action phased workflow: confirm trigger events, runner OS, required secrets/environment variables, job steps, and caching strategy
- Generate the
.github/workflows/<name>.ymlfile - Report the workflow path and setup instructions (secrets to configure, badges, etc.)
Output
.github/workflows/<name>.yml with complete job definitions, trigger events, permissions,
and inline comments explaining each step.
Edge Cases
- If
$ARGUMENTSis empty: begin with workflow type discovery - If the use case involves AI agents at runtime: redirect to
create-agentic-workflow - If secrets or environment variables are required: list them explicitly without values
Related Skills
richfrem/issue-worktree-agent
testing
VerifiedTrustedCommunity
Skill for creating and managing isolated git worktrees (`.worktrees/issue-NNN`) for issue execution branches. USE ONLY when setting up or cleaning up isolated git worktrees for specific issue execution. DO NOT USE for managing local task files (use `task-agent`) or escalating tasks to issues (use `github-issue-backlog-agent`).
4SKILL.mdUpdated Jul 29, 2026
richfrem/issue-pr-lifecycle-agent
data-ai
VerifiedTrustedCommunity
Skill for orchestrating the end-to-end GitHub issue lifecycle flow: Issue -> Worktree -> Implementation -> PR Creation -> Resolution Closure. USE ONLY when running or dry-running full lifecycle orchestration for resolving an issue with a PR. DO NOT USE for isolated worktree management only (use `issue-worktree-agent`) or logging issues (use `github-issue-agent`).
4SKILL.mdUpdated Jul 29, 2026
richfrem/github-issue-prioritizer
tools
VerifiedTrustedCommunity
Automatically ranks GitHub issues (P0-P3) based on friction tier, frequency, and blockages, synchronizing priority labels and GitHub Projects v2 custom fields.
4SKILL.mdUpdated Jul 29, 2026
richfrem/github-issue-backlog-agent
testing
VerifiedTrustedCommunity
Bridge skill for escalating ephemeral local task scratchpad items (`tasks/*.md`) into durable, taxonomy-validated, evidence-rich GitHub Issues. USE ONLY when promoting a single-session local task into durable repository backlog. DO NOT USE for managing local kanban boards (use `task-agent` instead) or directly querying/commenting on issues (use `github-issue-agent` instead).
4SKILL.mdUpdated Jul 29, 2026