github-actions-gen — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited github-actions-gen (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
当用户要求创建 CI/CD 流水线、GitHub Actions workflow、自动化部署配置时激活。
根据项目类型生成对应 workflow：
通用流水线模板：
ci.yml — 代码检查 + 测试（push/PR 触发）release.yml — 版本发布（tag 触发）deploy.yml — 部署流水线（按需）前端项目额外：
后端项目额外：
在 .github/workflows/ 目录生成：
ci.yml — 主 CI 流水线release.yml — 发布流水线（如需要）README-CICD.md — 流水线使用说明# .github/workflows/ci.yml
name: CI
on:
push:
branches: [main, develop]
pull_request:
branches: [main]
jobs:
test:
runs-on: ubuntu-latest
strategy:
matrix:
node-version: [18, 20, 22] # 按项目调整
steps:
- uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: ${{ matrix.node-version }}
cache: 'npm'
- run: npm ci
- run: npm test
- run: npm run lintactionlint 验证）@main）${{ secrets.XXX }} 引用permissions）timeout-minutes）npm ci 会失败用户输入：「帮我给这个 Next.js 项目创建 CI/CD 流水线」
输出：
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.