Agent skill · software engineering · secondsky
github-project-automation
GitHub repository automation (CI/CD, issue templates, Dependabot, CodeQL). Use for project setup, Actions workflows, security scanning, or encountering YAML syntax, workflow configuration, template structure errors.
Why this skill is useful
Adds pre-validated YAML templates and specific GitHub Actions configurations that the AI wouldn't reliably generate on its own.
What it needs
Requires gh, git installed locally. About 8k tokens when loaded. Last updated 2026-08-06. 204 stars on the source repository.
What this skill does
GitHub Project Automation Status: Production Ready ✅ Last Updated: 2025-12-17 Version: 2.0.0 (Optimized with progressive disclosure) Dependencies: None (git and gh CLI recommended) Latest Versions: actions/checkout@v4.2.2, actions/setup-node@v4.1.0, github/codeql-action@v3.27.4 --- Quick Start (15 Minutes) 1. Choose Your Framework Select the workflow template that matches your project: Why this matters: Pre-validated YAML prevents syntax errors SHA-pinned actions for security Explicit runner versions (ubuntu-24.04) All 8 GitHub Actions errors prevented 2. Add Issue Templates Why YAML over Markdown: Required field validation (Error #12 prevented) Consistent data structure Better user experience No incomplete issues 3. Enable Security Scanning CRITICAL: CodeQL requires specific permissions (security-events: write) Dependabot has 10 PR limit per ecosystem Both must run on Dependabot PRs (Error #13 prevention) --- The 5-Step Complete Setup Process Step 1: Repository Structure Create the standard GitHub automation directory structure: Key Points: workflows/ is plural ISSUETEMPLATE/ is singular (legacy naming) dependabot.yml goes in .github/, NOT workflows/ Step 2: Select Workflow Templates Choose workflows based on your project needs: Continuous Integration (pick ONE): 1. ci-basic.yml - Generic test/lint/build (all frameworks) 2. ci-node.yml - Node.js with matrix testing (18, 20, 22) 3. ci-python.yml - Python with matrix testing (3.10, 3.11, 3.12) 4. ci-react.yml - React/TypeScript with type checking Deployment (optional): 5. ci-cloudflare-workers.yml - Deploy to Cloudflare Workers Security (recommended): 6. security-codeql.yml - Code scanning 7. dependabot.yml - Dependency updates Copy selected templates: Step 3: Configure Secrets (if deploying) For deployment workflows (Cloudflare, AWS, etc.), add secrets: Critical Syntax: Prevents Error #6 (secrets syntax). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills secondsky/github-project-automation