The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches the actionlint utility from its GitHub release page. The download process follows security best practices by pinning the version (1.7.7) and verifying the file against a hardcoded SHA256 checksum before execution.
[COMMAND_EXECUTION]: Utilizes standard developer tools including git to identify changes and tar to manage the downloaded binary. It executes the validated actionlint binary to perform syntax checks on workflow files.
[INDIRECT_PROMPT_INJECTION]: The skill processes repository workflow files which are technically external inputs in a shared development environment.
Ingestion points: Files located under .github/workflows/ identified via git diff.
Boundary markers: Not explicitly defined for the file content interpolation.
Capability inventory: Limited to executing a specialized linter and repository inspection tools.
Sanitization: Relies on actionlint for structural validation; does not execute or evaluate the content of the YAML files themselves.

authoring-github-workflows