How do I install the Github Actions Deploy Risk Audit skill?

Run npx skillmds@latest add dvcrn/github-actions-deploy-risk-audit in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Github Actions Deploy Risk Audit safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Github Actions Deploy Risk Audit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Github Actions Deploy Risk Audit free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Github Actions Deploy Risk Audit?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Github Actions Deploy Risk Audit by dvcrn

Name: Github Actions Deploy Risk Audit
Rating: 4.666666666666667 (3 reviews)
Author: dvcrn

File contents

GitHub Actions Deploy Risk Audit

Use this skill to rank deployment workflows that are currently risky to trust for production releases.

What this skill does

Reads GitHub Actions run JSON exports
Filters to deployment/release workflows (configurable regex)
Groups by repository + workflow + branch
Scores risk using:
- failure rate
- unresolved trailing failure streak
- days since last successful run
Flags warning/critical groups based on configurable score thresholds
Emits text or JSON output for CI dashboards and release gates

Inputs

Optional:

RUN_GLOB (default: artifacts/github-actions/*.json)
TOP_N (default: 20)
OUTPUT_FORMAT (text or json, default: text)
MIN_RUNS (default: 2)
DEPLOY_WORKFLOW_MATCH (default: (?i)(deploy|release|ship|production))
BRANCH_MATCH (regex, optional)
BRANCH_EXCLUDE (regex, optional)
REPO_MATCH (regex, optional)
REPO_EXCLUDE (regex, optional)
FAIL_WARN_PERCENT (default: 20)
FAIL_CRITICAL_PERCENT (default: 40)
STALE_SUCCESS_DAYS (default: 7)
WARN_SCORE (default: 35)
CRITICAL_SCORE (default: 60)
FAIL_ON_CRITICAL (0 or 1, default: 0)

Collect run JSON

gh run view <run-id> --json databaseId,workflowName,event,conclusion,headBranch,headSha,createdAt,updatedAt,startedAt,url,repository \
  > artifacts/github-actions/run-<run-id>.json

Run

Text report:

RUN_GLOB='artifacts/github-actions/*.json' \
DEPLOY_WORKFLOW_MATCH='(?i)(deploy|release)' \
MIN_RUNS=3 \
bash skills/github-actions-deploy-risk-audit/scripts/deploy-risk-audit.sh

JSON output with fail gate:

RUN_GLOB='artifacts/github-actions/*.json' \
OUTPUT_FORMAT=json \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-deploy-risk-audit/scripts/deploy-risk-audit.sh

Run with bundled fixtures:

RUN_GLOB='skills/github-actions-deploy-risk-audit/fixtures/*.json' \
bash skills/github-actions-deploy-risk-audit/scripts/deploy-risk-audit.sh

Output contract

Exit 0 in report mode (default)
Exit 1 when FAIL_ON_CRITICAL=1 and one or more groups are critical
Text mode prints summary + ranked deploy risk groups
JSON mode prints summary + scored groups + critical group details

---name: github-actions-deploy-risk-auditdescription: Audit deployment workflow risk from GitHub Actions runs by scoring failure rate, unresolved failure streaks, and time since last successful deploy.---# GitHub Actions Deploy Risk AuditUse this skill to rank deployment workflows that are currently risky to trust for production releases.## What this skill does- Reads GitHub Actions run JSON exports- Filters to deployment/release workflows (configurable regex)- Groups by repository + workflow + branch- Scores risk using: - failure rate - unresolved trailing failure streak - days since last successful run- Flags warning/critical groups based on configurable score thresholds- Emits text or JSON output for CI dashboards and release gates## InputsOptional:- `RUN_GLOB` (default: `artifacts/github-actions/*.json`)- `TOP_N` (default: `20`)- `OUTPUT_FORMAT` (`text` or `json`, default: `text`)- `MIN_RUNS` (default: `2`)- `DEPLOY_WORKFLOW_MATCH` (default: `(?i)(deploy|release|ship|production)`)- `BRANCH_MATCH` (regex, optional)- `BRANCH_EXCLUDE` (regex, optional)- `REPO_MATCH` (regex, optional)- `REPO_EXCLUDE` (regex, optional)- `FAIL_WARN_PERCENT` (default: `20`)- `FAIL_CRITICAL_PERCENT` (default: `40`)- `STALE_SUCCESS_DAYS` (default: `7`)- `WARN_SCORE` (default: `35`)- `CRITICAL_SCORE` (default: `60`)- `FAIL_ON_CRITICAL` (`0` or `1`, default: `0`)## Collect run JSON```bashgh run view <run-id> --json databaseId,workflowName,event,conclusion,headBranch,headSha,createdAt,updatedAt,startedAt,url,repository \ > artifacts/github-actions/run-<run-id>.json```## RunText report:```bashRUN_GLOB='artifacts/github-actions/*.json' \DEPLOY_WORKFLOW_MATCH='(?i)(deploy|release)' \MIN_RUNS=3 \bash skills/github-actions-deploy-risk-audit/scripts/deploy-risk-audit.sh```JSON output with fail gate:```bashRUN_GLOB='artifacts/github-actions/*.json' \OUTPUT_FORMAT=json \FAIL_ON_CRITICAL=1 \bash skills/github-actions-deploy-risk-audit/scripts/deploy-risk-audit.sh```Run with bundled fixtures:```bashRUN_GLOB='skills/github-actions-deploy-risk-audit/fixtures/*.json' \bash skills/github-actions-deploy-risk-audit/scripts/deploy-risk-audit.sh```## Output contract- Exit `0` in report mode (default)- Exit `1` when `FAIL_ON_CRITICAL=1` and one or more groups are critical- Text mode prints summary + ranked deploy risk groups- JSON mode prints summary + scored groups + critical group details

Frequently asked questions

Github Actions Deploy Risk Audit