How do I install the Shared Actions skill?

Run npx skillmds@latest add bnema/shared-actions in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Shared Actions safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Shared Actions?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Shared Actions free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Shared Actions?

bnema (@bnema) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Shared Actions by bnema — Agent Skill

Name: Shared Actions
Author: bnema

File contents

Shared GitHub Actions

Alex maintains reusable GitHub Actions workflows here:

Local repo: $HOME/dev/projects/gh-actions
GitHub repo: bnema/gh-actions

Before creating bespoke workflow logic in Alex's repositories, check this repo and prefer calling its reusable workflows.

Reusable workflows

Use this form from other repos:

jobs:
  ci:
    uses: bnema/gh-actions/.github/workflows/<workflow>.yml@main

Available workflows:

Workflow	Use for
`go-ci.yml`	Go lint/test CI. Supports `go-version`, `lint-version`, `lint-command`, `test-flags`, `test-command`, `pre-command`, containers, package installs, and path filtering.
`go-release.yml`	GoReleaser releases on `v*` tags.
`frontend-ci.yml`	npm/bun frontend checks: Svelte, TypeScript, ESLint.
`dependabot-auto-merge.yml`	Auto-merge Dependabot patch/minor PRs. Majors stay manual.
`discord-notify.yml`	Discord webhook notifications.

Dependabot for GitHub Actions

For repos that should keep Actions updated, add:

# .github/dependabot.yml
version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"

If auto-merge is wanted and GitHub repo settings allow auto-merge, add a caller workflow:

name: Dependabot Auto-Merge
on: pull_request

jobs:
  auto-merge:
    if: github.event.pull_request.user.login == 'dependabot[bot]'
    permissions:
      contents: write
      pull-requests: write
    uses: bnema/gh-actions/.github/workflows/dependabot-auto-merge.yml@main

Common mistakes

Do not duplicate CI/release workflow internals before checking $HOME/dev/projects/gh-actions/README.md.
For reusable workflow callers, put permissions on the calling job when the called workflow needs write access.
dependabot-auto-merge.yml uses GitHub auto-merge; required checks and branch protection still decide when the PR actually merges.

---name: shared-actionsdescription: Use when adding or modifying GitHub Actions workflows, reusable workflows, CI, Go releases, frontend checks, Dependabot updates, Dependabot auto-merge, or Discord notifications in Alex's repositories.---# Shared GitHub ActionsAlex maintains reusable GitHub Actions workflows here:- Local repo: `$HOME/dev/projects/gh-actions`- GitHub repo: `bnema/gh-actions`Before creating bespoke workflow logic in Alex's repositories, check this repo and prefer calling its reusable workflows.## Reusable workflowsUse this form from other repos:```yamljobs: ci: uses: bnema/gh-actions/.github/workflows/<workflow>.yml@main```Available workflows:| Workflow | Use for ||---|---|| `go-ci.yml` | Go lint/test CI. Supports `go-version`, `lint-version`, `lint-command`, `test-flags`, `test-command`, `pre-command`, containers, package installs, and path filtering. || `go-release.yml` | GoReleaser releases on `v*` tags. || `frontend-ci.yml` | npm/bun frontend checks: Svelte, TypeScript, ESLint. || `dependabot-auto-merge.yml` | Auto-merge Dependabot patch/minor PRs. Majors stay manual. || `discord-notify.yml` | Discord webhook notifications. |## Dependabot for GitHub ActionsFor repos that should keep Actions updated, add:```yaml# .github/dependabot.ymlversion: 2updates: - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly"```If auto-merge is wanted and GitHub repo settings allow auto-merge, add a caller workflow:```yamlname: Dependabot Auto-Mergeon: pull_requestjobs: auto-merge: if: github.event.pull_request.user.login == 'dependabot[bot]' permissions: contents: write pull-requests: write uses: bnema/gh-actions/.github/workflows/dependabot-auto-merge.yml@main```## Common mistakes- Do not duplicate CI/release workflow internals before checking `$HOME/dev/projects/gh-actions/README.md`.- For reusable workflow callers, put `permissions` on the calling job when the called workflow needs write access.- `dependabot-auto-merge.yml` uses GitHub auto-merge; required checks and branch protection still decide when the PR actually merges.

Frequently asked questions

Shared Actions