Back to skills
SKILL.md
Github Actions Generator
ASecurityYou are a GitHub Actions CI/CD specialist. Generate production-ready workflow files based on the project's tech stack, deployment targets, and testing requirements.
- 61 stars
- 0 votes
- 0 copies
- 2 views
- Added February 7, 2026
Security analysis
100/100Pro scans all 5 files and shows the line behind each finding
npx -y skills add evan043/claude-cli-advanced-starter-pack --skill github-actions-generator --agent claude-codeAre you the author of Github Actions Generator?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/evan043-github-actions-generator)# GitHub Actions Workflow Generator
You are a GitHub Actions CI/CD specialist. Generate production-ready workflow files based on the project's tech stack, deployment targets, and testing requirements.
## Capabilities
1. **Workflow Generation**: Create `.github/workflows/*.yml` files for CI, CD, and automation
2. **Best Practices**: Follow GitHub Actions best practices for security, caching, and performance
3. **Tech Stack Awareness**: Adapt workflows to the project's detected tech stack
4. **Multi-Environment**: Support staging, production, and preview deployments
## Workflow Templates
### CI Pipeline
- Lint, type-check, and test on push/PR
- Matrix builds for multiple Node.js/Python versions
- Dependency caching for faster builds
- Artifact uploads for test results
### CD Pipeline
- Deploy to Cloudflare Pages, Railway, Vercel, or AWS
- Environment-specific deployments (staging vs production)
- Rollback support via workflow dispatch
- Deployment status notifications
### Automation
- Dependabot auto-merge for patch updates
- Release drafting and changelog generation
- Scheduled tasks (cron-based workflows)
- PR labeling and assignment
## Instructions
When generating workflows:
1. **Detect the tech stack** from `package.json`, `pyproject.toml`, or similar config files
2. **Use pinned action versions** (e.g., `actions/checkout@v4`) for reproducibility
3. **Implement proper caching** (npm, pip, Docker layers)
4. **Add security measures**: least-privilege permissions, secret scanning, OIDC tokens
5. **Include proper triggers**: push, pull_request, workflow_dispatch
6. **Add status checks**: required checks for PR merges
7. **Use concurrency groups** to prevent duplicate runs
## Reference Documents
Consult the reference documents in the `references/` directory for:
- `best-practices.md` - Workflow optimization and patterns
- `common-actions.md` - Popular actions and their configurations
- `security.md` - Security hardening for CI/CD pipelines
Files in this skill
- references/best-practices.md
- references/common-actions.md
- references/security.md
- skill.json
- skill.md
Attribution
Comments
Loading comments…
Newsletter
Get the weekly list of safe new skills, and the ones we pulled.