How do I install the Github Actions Incident Timeline Audit skill?

Run npx skillmds@latest add dvcrn/github-actions-incident-timeline-audit in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Github Actions Incident Timeline Audit safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Github Actions Incident Timeline Audit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Github Actions Incident Timeline Audit free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Github Actions Incident Timeline Audit?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Github Actions Incident Timeline Audit by dvcrn

Name: Github Actions Incident Timeline Audit
Rating: 4.2 (5 reviews)
Author: dvcrn

File contents

GitHub Actions Incident Timeline Audit

Use this skill to convert noisy failed run exports into incident windows you can triage quickly during CI reliability reviews.

What this skill does

Reads GitHub Actions run JSON exports
Keeps only failed/cancelled/timed-out style outcomes
Groups failures by repository into incident windows using a configurable gap threshold
Scores each incident using failed-run and duration thresholds
Emits text or JSON output for review docs, ops dashboards, and CI fail gates

Inputs

Optional:

RUN_GLOB (default: artifacts/github-actions/*.json)
TOP_N (default: 20)
OUTPUT_FORMAT (text or json, default: text)
INCIDENT_GAP_MINUTES (default: 45)
WARN_FAILED_RUNS (default: 2)
CRITICAL_FAILED_RUNS (default: 4)
WARN_DURATION_MINUTES (default: 20)
CRITICAL_DURATION_MINUTES (default: 60)
WORKFLOW_MATCH (regex, optional)
WORKFLOW_EXCLUDE (regex, optional)
REPO_MATCH (regex, optional)
REPO_EXCLUDE (regex, optional)
FAIL_ON_CRITICAL (0 or 1, default: 0)

Collect run JSON

gh run view <run-id> --json databaseId,workflowName,event,conclusion,headBranch,createdAt,updatedAt,startedAt,url,repository \
  > artifacts/github-actions/run-<run-id>.json

Run

Text report:

RUN_GLOB='artifacts/github-actions/*.json' \
INCIDENT_GAP_MINUTES=45 \
bash skills/github-actions-incident-timeline-audit/scripts/incident-timeline-audit.sh

JSON output with fail gate:

RUN_GLOB='artifacts/github-actions/*.json' \
OUTPUT_FORMAT=json \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-incident-timeline-audit/scripts/incident-timeline-audit.sh

Run with bundled fixtures:

RUN_GLOB='skills/github-actions-incident-timeline-audit/fixtures/*.json' \
bash skills/github-actions-incident-timeline-audit/scripts/incident-timeline-audit.sh

Output contract

Exit 0 in report mode (default)
Exit 1 when FAIL_ON_CRITICAL=1 and one or more incidents are critical
Text mode prints summary + ranked incident windows
JSON mode prints summary + incidents + critical incident details

---name: github-actions-incident-timeline-auditdescription: Cluster failed GitHub Actions runs into incident windows by repo to expose outage duration, impact scope, and escalation severity.---# GitHub Actions Incident Timeline AuditUse this skill to convert noisy failed run exports into incident windows you can triage quickly during CI reliability reviews.## What this skill does- Reads GitHub Actions run JSON exports- Keeps only failed/cancelled/timed-out style outcomes- Groups failures by repository into incident windows using a configurable gap threshold- Scores each incident using failed-run and duration thresholds- Emits text or JSON output for review docs, ops dashboards, and CI fail gates## InputsOptional:- `RUN_GLOB` (default: `artifacts/github-actions/*.json`)- `TOP_N` (default: `20`)- `OUTPUT_FORMAT` (`text` or `json`, default: `text`)- `INCIDENT_GAP_MINUTES` (default: `45`)- `WARN_FAILED_RUNS` (default: `2`)- `CRITICAL_FAILED_RUNS` (default: `4`)- `WARN_DURATION_MINUTES` (default: `20`)- `CRITICAL_DURATION_MINUTES` (default: `60`)- `WORKFLOW_MATCH` (regex, optional)- `WORKFLOW_EXCLUDE` (regex, optional)- `REPO_MATCH` (regex, optional)- `REPO_EXCLUDE` (regex, optional)- `FAIL_ON_CRITICAL` (`0` or `1`, default: `0`)## Collect run JSON```bashgh run view <run-id> --json databaseId,workflowName,event,conclusion,headBranch,createdAt,updatedAt,startedAt,url,repository \ > artifacts/github-actions/run-<run-id>.json```## RunText report:```bashRUN_GLOB='artifacts/github-actions/*.json' \INCIDENT_GAP_MINUTES=45 \bash skills/github-actions-incident-timeline-audit/scripts/incident-timeline-audit.sh```JSON output with fail gate:```bashRUN_GLOB='artifacts/github-actions/*.json' \OUTPUT_FORMAT=json \FAIL_ON_CRITICAL=1 \bash skills/github-actions-incident-timeline-audit/scripts/incident-timeline-audit.sh```Run with bundled fixtures:```bashRUN_GLOB='skills/github-actions-incident-timeline-audit/fixtures/*.json' \bash skills/github-actions-incident-timeline-audit/scripts/incident-timeline-audit.sh```## Output contract- Exit `0` in report mode (default)- Exit `1` when `FAIL_ON_CRITICAL=1` and one or more incidents are critical- Text mode prints summary + ranked incident windows- JSON mode prints summary + incidents + critical incident details

Frequently asked questions

Github Actions Incident Timeline Audit