Is the GitHub Actions skill free?

Yes. The skill itself is free from retlehs/gh-actions. SkillProof publishes the install command and an independent test verdict at no cost.

What is the GitHub Actions SkillProof Score?

9.6/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 9/10, docs & honesty 5/5.

How do I install GitHub Actions?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use GitHub Actions with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

GitHub Actions

Keeps GitHub Actions workflows on current action versions with least-privilege security defaults.

by retlehs · retlehs/gh-actions

Tested · Works

Install — copy the command Download source ↗

Test report

Verdict: Tested · Works
Score: 9.6/10
Tested: Jul 16, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 10, 2026 · ff6fec6

Live-checked its own claim: actions/checkout and actions/setup-node are both actually at v7.0.0 right now, four majors past the v3 a baseline (no-skill) answer produced from memory — exactly the 'never guess versions' problem the skill exists to prevent.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 9/10
Docs & honesty 5/5

What GitHub Actions does

A reference skill for writing or editing .github/workflows/*.yml — forces a live version check via gh api instead of guessing action tags, and bakes in security defaults (least-privilege permissions, no pull_request_target misuse, SHA-pinning third-party actions) plus caching and concurrency patterns. Triggers when writing or modifying GitHub Actions workflows.

How to install GitHub Actions

git clone https://github.com/retlehs/gh-actions
mkdir -p ~/.claude/skills
cp -r gh-actions ~/.claude/skills/gh-actions

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger GitHub Actions

/gh-actions Keeps GitHub Actions workflows on current action versions with least-privilege security defaults.

It also activates on plain-language prompts like these:

Update my GitHub Actions workflow to the current action versions
Write me a CI workflow with least-privilege permissions set
Review this workflow yaml for pull_request_target security issues

Frequently asked questions

Is the GitHub Actions skill free?: Yes. The skill itself is free from retlehs/gh-actions. SkillProof publishes the install command and an independent test verdict at no cost.
Does GitHub Actions work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 16, 2026. Verdict: Tested · Works. Live-checked its own claim: actions/checkout and actions/setup-node are both actually at v7.0.0 right now, four majors past the v3 a baseline (no-skill) answer produced from memory — exactly the 'never guess versions' problem the skill exists to prevent.
What is the GitHub Actions SkillProof Score?: 9.6/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 9/10, docs & honesty 5/5.
How do I install GitHub Actions?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use GitHub Actions with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.