How do I install the Github Actions CI skill?

Run npx skillmds@latest add bh611627/github-actions-ci in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Github Actions CI skill do?

GitHub Actions for Next.js and TypeScript - lint test build cache and PR checks It is listed under Web & Frontend on SkillMD.

Is Github Actions CI safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Github Actions CI?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Github Actions CI free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Github Actions CI?

bh611627 (@bh611627) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Github Actions CI by bh611627 — Agent Skill

Name: Github Actions CI
Author: bh611627

File contents

Instructions

When to Use

Use for PR CI: lint, typecheck, test, build, cache.
Prefer secure-dependencies for audit/frozen lockfile policy.
Prefer monorepo-tooling for turbo task graphs first.

Add or improve GitHub Actions for a Next.js + pnpm repo.

Workflow permissions: default contents: read at workflow or job level; elevate id-token or packages only where OIDC/npm publish needs it - least privilege.
Concurrency: group: ${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true on PR workflows to save minutes and avoid stale deploys.
Triggers: pull_request + push to main; optional workflow_dispatch.
pnpm: pnpm/action-setup + cache via pnpm store path or built-in cache; always pnpm install --frozen-lockfile in CI.
Jobs: lint → typecheck → test → build with needs where parallel is impossible; optional parallel audit job (pnpm audit --audit-level=high or org policy) - see secure-dependencies.
Next build: set NODE_OPTIONS only if required; artifact next build trace for failures optional.
Fork PRs: pull_request_target avoided unless user understands risk; default pull_request.
Node version: pin 22 or 20 LTS with actions/setup-node and match engines in package.json.

Outcomes

Workflow file path + YAML body or diff against existing workflow.

Output Rules

Fenced yaml for workflow; mention required secrets by name only.

Scope and boundaries

In scope: CI YAML, cache, job graph.
Out of scope: self-hosted runner fleet design, Kubernetes deploy.

Safety

Never echo GITHUB_TOKEN patterns; use ${{ secrets.* }} placeholders.

Troubleshooting

pnpm frozen-lockfile fails: align CI with lockfile version from contributor.
OOM on build: split build job memory or enable standalone output only if user wants.

Related skills

secure-dependencies - lockfile and audit in CI
monorepo-tooling - turbo pipelines in Actions
dependency-migrations - major upgrade gates

GitHub: https://github.com/bh611627/skillcodex/tree/main/skills/github-actions-ci/SKILL.md
npm: https://www.npmjs.com/package/@skillcodex/skills

---name: github-actions-cidescription: GitHub Actions for Next.js and TypeScript - lint test build cache and PR checks---# Instructions## When to Use- Use for PR CI: lint, typecheck, test, build, cache.- Prefer `secure-dependencies` for audit/frozen lockfile policy.- Prefer `monorepo-tooling` for turbo task graphs first.Add or improve **GitHub Actions** for a **Next.js** + **pnpm** repo.1. **Workflow permissions:** default `contents: read` at workflow or job level; elevate `id-token` or `packages` only where OIDC/npm publish needs it - least privilege.2. **Concurrency:** `group: ${{ github.workflow }}-${{ github.ref }}` + `cancel-in-progress: true` on PR workflows to save minutes and avoid stale deploys.3. Triggers: `pull_request` + `push` to `main`; optional `workflow_dispatch`.4. **pnpm:** `pnpm/action-setup` + cache via `pnpm store path` or built-in cache; always **`pnpm install --frozen-lockfile`** in CI.5. Jobs: `lint` → `typecheck` → `test` → `build` with `needs` where parallel is impossible; optional parallel **`audit`** job (`pnpm audit --audit-level=high` or org policy) - see `secure-dependencies`.6. **Next build:** set `NODE_OPTIONS` only if required; artifact `next build` trace for failures optional.7. **Fork PRs:** `pull_request_target` avoided unless user understands risk; default `pull_request`.8. **Node version:** pin `22` or `20` LTS with `actions/setup-node` and match `engines` in `package.json`.## Outcomes- Workflow file path + YAML body or diff against existing workflow.## Output RulesFenced `yaml` for workflow; mention required secrets by name only.## Scope and boundaries- **In scope:** CI YAML, cache, job graph.- **Out of scope:** self-hosted runner fleet design, Kubernetes deploy.## Safety- Never echo `GITHUB_TOKEN` patterns; use `${{ secrets.* }}` placeholders.## Troubleshooting- **pnpm frozen-lockfile fails:** align CI with lockfile version from contributor.- **OOM on build:** split build job memory or enable standalone output only if user wants.## Related skills- [`secure-dependencies`](../secure-dependencies/SKILL.md) - lockfile and audit in CI- [`monorepo-tooling`](../monorepo-tooling/SKILL.md) - turbo pipelines in Actions- [`dependency-migrations`](../dependency-migrations/SKILL.md) - major upgrade gates**GitHub:** https://github.com/bh611627/skillcodex/tree/main/skills/github-actions-ci/SKILL.md **npm:** https://www.npmjs.com/package/@skillcodex/skills

Frequently asked questions