Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Ветка → поимённые коммиты → PR через gh CLI/GitHub MCP — заголовок по конвенции, описание что/зачем/как проверено (роль gitflow). Use когда изменения нужно оформить в pull request.
Релиз по semver — версия из коммитов → синхронизация манифестов → tag → GitHub release; push и публикация ТОЛЬКО с явного подтверждения (роль gitflow). Use когда нужно выпустить версию.
Релизная/git-цель через Task Master — коммиты, PR, changelog, релиз до готового с доказательствами выводом команд (роль gitflow). Use когда git/релизная цель многошаговая.
Optimizes GitHub presence for search visibility, GEO, and open source marketing. Covers repository and profile READMEs, names, descriptions, topics, pinned repositories, Pages sites, gists, and curated Awesome lists.
Use the GitHub CLI for issues, pull requests, comments, reviews, releases, and repositories. Inspect CI/check logs and run gh api queries.
GitHub operations via gh CLI: issues, PRs, CI runs, code review, API queries. Use when: (1) checking PR status or CI, (2) creating/commenting on issues, (3) listing/filtering PRs or issues, (4) viewing run logs. NOT for: complex web UI interactions requiring manual browser flows (use browser tooling when available), bulk operations across many repos (script with gh api), or when gh auth is not c…
Provides workflow patterns for React Native iOS simulator and Android emulator cloud builds with downloadable artifacts. Covers CI build pipelines and artifact retrieval through the gh CLI and GitHub API.
Use when hunting GitHub Actions cache poisoning vulnerabilities where an attacker can inject malicious content into the CI/CD cache and have it restored by a privileged downstream workflow. Trigger on: "cache poisoning", "actions/cache", "actions/setup-node", "node_modules cache", "GitHub Actions cache", "pnpm cache", "LRU eviction", "10GB limit", "Cacheract", "poisoned cache", "workflow cache att…
Reviews GitHub Actions workflow efficiency and recommends changes that reduce CI minutes and associated costs.
Examines workflow threat models, including untrusted input, privileged triggers, mutable action references, and excessive token permissions. Covers SHA pinning, environment injection, secret exposure, OIDC, and risks from self-hosted runners in public repositories.
Use when auditing GitHub Actions workflows for script injection vulnerabilities via unsanitized context expressions. Trigger on: "github actions injection", "workflow injection", "head_ref injection", "github context injection", "pwn request", "github.head_ref", "github.event.pull_request.title", "github.event.issue.body", pull_request_target workflows, run: steps interpolating GitHub context vari…
Create production-ready GitHub Actions workflows for automated testing, building, and deploying applications. Use when setting up CI/CD with GitHub Actions, automating development workflows, or creating reusable workflow templates.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name