CI/CD Pipelines
CI/CD design, caching, DevSecOps scanning and pipeline debugging
Test report
- Verdict
- Works with setup
- Score
- Tested
- Jul 16, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Jul 16, 2026
⚠ This skill is no longer available upstream. Our re-check on Aug 10, 2026 couldn't find it any more (SKILL.md not found in repo tree). The test below is what we measured on Jul 16, 2026 and we're leaving it up as a record — but there is nothing left to install, so we've removed the command.
Task: audit and fix a real workflow (.github/workflows/ci.yml from hands-on-deck repository — pytest + LibreOffice + Playwright without cache). Baseline analysis without skill yielded 7 correct findings (no pip/apt/playwright cache, no timeout-minutes, no concurrency, no permissions, floating tags @v4/@v5). The standard scripts/pipeline_analyzer.py found only 1 of them ('No dependency caching detected') — meaning it lost to baseline analysis; it exclusively searches for 'uses: actions/cache' and doesn't know about cache:'pip' in setup-python, so on the skill's OWN python-ci.yml template (where cache:'pip' is in 4 places, and actions/cache is 0), it also reports 'No dependency caching detected' and gives 2 false recommendations for my already fixed workflow. Version check flags only @v1/@v2, causing current gitleaks-action@v2 to be marked 'outdated', and the truly dangerous trufflehog@main to be missed — despite SKILL.md's own checklist requiring actions to be pinned to SHA. The skill's value lies elsewhere: 3,456 lines of references/ and 10 out of 10 valid YAML templates with cache/timeout-minutes/concurrency/permissions/matrix — a working workflow (2 jobs, fail-fast lint, 4 cache mechanisms, 5/20 min timeouts) was assembled based on their checklists, which parses and is demonstrably better than baseline prose. Separate breakage: SKILL.md refers to templates/github-actions/*.yml, but they are located in assets/templates/ — all 10 paths in the decision tree are broken, hence verdict setup. Stage 0 clean: SKILL.md (496 lines), 5 reference files, and pipeline_analyzer.py read — only local YAML parsing, no network or secrets.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 4/5
- Triggers reliably 5/5
- Output vs. baseline 6/10
- Docs & honesty 3/5
What CI/CD Pipelines does
Reference library and templates for GitHub Actions and GitLab CI: pipeline design, build optimisation, SAST/DAST/SCA scanning, OIDC and secrets, plus failure troubleshooting. Triggers on CI/CD, GitHub Actions, GitLab CI, pipelines, workflows, builds or DevSecOps.
How to install CI/CD Pipelines
Nothing to install: the source repository no longer has this skill. If the author brings it back, our daily re-check will pick it up and the command will reappear here.
Commands — how to trigger CI/CD Pipelines
-
/ci-cdCI/CD design, caching, DevSecOps scanning and pipeline debugging
It also activates on plain-language prompts like these:
-
Audit this GitHub Actions workflow for missing caching and timeouts -
Help me add OIDC secrets and SAST scanning to my CI/CD pipeline -
Fix my pipeline so pip, apt and Playwright dependencies get cached
Frequently asked questions
- Is the CI/CD Pipelines skill free?
- Yes. The skill itself is free from ahmedasmar/devops-claude-skills. SkillProof publishes the install command and an independent test verdict at no cost.
- Does CI/CD Pipelines work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 16, 2026. Verdict: Works with setup. Task: audit and fix a real workflow (.github/workflows/ci.yml from hands-on-deck repository — pytest + LibreOffice + Playwright without cache). Baseline analysis without skill yielded 7 correct findings (no pip/apt/playwright cache, no timeout-minutes, no concurrency, no permissions, floating tags @v4/@v5). The standard scripts/pipeline_analyzer.py found only 1 of them ('No dependency caching detected') — meaning it lost to baseline analysis; it exclusively searches for 'uses: actions/cache' and doesn't know about cache:'pip' in setup-python, so on the skill's OWN python-ci.yml template (where cache:'pip' is in 4 places, and actions/cache is 0), it also reports 'No dependency caching detected' and gives 2 false recommendations for my already fixed workflow. Version check flags only @v1/@v2, causing current gitleaks-action@v2 to be marked 'outdated', and the truly dangerous trufflehog@main to be missed — despite SKILL.md's own checklist requiring actions to be pinned to SHA. The skill's value lies elsewhere: 3,456 lines of references/ and 10 out of 10 valid YAML templates with cache/timeout-minutes/concurrency/permissions/matrix — a working workflow (2 jobs, fail-fast lint, 4 cache mechanisms, 5/20 min timeouts) was assembled based on their checklists, which parses and is demonstrably better than baseline prose. Separate breakage: SKILL.md refers to templates/github-actions/*.yml, but they are located in assets/templates/ — all 10 paths in the decision tree are broken, hence verdict setup. Stage 0 clean: SKILL.md (496 lines), 5 reference files, and pipeline_analyzer.py read — only local YAML parsing, no network or secrets.
- What is the CI/CD Pipelines SkillProof Score?
- 7.2/10 — installs cleanly 4/5, triggers reliably 5/5, output vs. baseline 6/10, docs & honesty 3/5.
- How do I install CI/CD Pipelines?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use CI/CD Pipelines with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.