How do I install the Github Actions Manual Trigger Audit skill?

Run npx skillmds@latest add dvcrn/github-actions-manual-trigger-audit in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Github Actions Manual Trigger Audit safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Github Actions Manual Trigger Audit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Github Actions Manual Trigger Audit free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Github Actions Manual Trigger Audit?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Github Actions Manual Trigger Audit by dvcrn

Name: Github Actions Manual Trigger Audit
Rating: 4.2 (5 reviews)
Author: dvcrn

File contents

GitHub Actions Manual Trigger Audit

Use this skill to detect workflows that rely too heavily on manual triggers (workflow_dispatch / repository_dispatch) instead of automated CI events.

What this skill does

Reads GitHub Actions run JSON exports
Groups runs by repository + workflow (+ branch)
Measures manual-trigger share vs total run volume
Tracks recent manual-trigger streaks (latest N runs)
Scores severity (ok, warn, critical) for operational risk gating
Emits text or JSON output for automation

Inputs

Optional:

RUN_GLOB (default: artifacts/github-actions/*.json)
TOP_N (default: 20)
OUTPUT_FORMAT (text or json, default: text)
GROUP_BY (workflow or workflow-branch, default: workflow)
MANUAL_EVENTS (comma-separated, default: workflow_dispatch,repository_dispatch)
RECENT_WINDOW (latest runs inspected for streak, default: 5)
MIN_RUNS (minimum runs required, default: 5)
WARN_MANUAL_RATIO (0..1, default: 0.35)
CRITICAL_MANUAL_RATIO (0..1, default: 0.65)
WARN_MANUAL_RUNS (default: 5)
CRITICAL_MANUAL_RUNS (default: 12)
WARN_RECENT_MANUAL_STREAK (default: 3)
CRITICAL_RECENT_MANUAL_STREAK (default: 5)
WORKFLOW_MATCH / WORKFLOW_EXCLUDE (regex, optional)
BRANCH_MATCH / BRANCH_EXCLUDE (regex, optional)
EVENT_MATCH / EVENT_EXCLUDE (regex, optional)
REPO_MATCH / REPO_EXCLUDE (regex, optional)
FAIL_ON_CRITICAL (0 or 1, default: 0)

Collect run JSON

gh run view <run-id> --json databaseId,workflowName,event,headBranch,conclusion,createdAt,updatedAt,url,repository \
  > artifacts/github-actions/run-<run-id>.json

Run

Text report:

RUN_GLOB='artifacts/github-actions/*.json' \
bash skills/github-actions-manual-trigger-audit/scripts/manual-trigger-audit.sh

JSON output + fail gate:

RUN_GLOB='artifacts/github-actions/*.json' \
OUTPUT_FORMAT=json \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-manual-trigger-audit/scripts/manual-trigger-audit.sh

Run against bundled fixtures:

RUN_GLOB='skills/github-actions-manual-trigger-audit/fixtures/*.json' \
bash skills/github-actions-manual-trigger-audit/scripts/manual-trigger-audit.sh

Output contract

Exit 0 in report mode (default)
Exit 1 when FAIL_ON_CRITICAL=1 and one or more groups are critical
Text mode prints summary + ranked workflow groups
JSON mode prints summary + ranked groups + critical groups

---name: github-actions-manual-trigger-auditdescription: Audit manual GitHub Actions trigger dependence by workflow/event to flag automation gaps and intervention risk.---# GitHub Actions Manual Trigger AuditUse this skill to detect workflows that rely too heavily on manual triggers (`workflow_dispatch` / `repository_dispatch`) instead of automated CI events.## What this skill does- Reads GitHub Actions run JSON exports- Groups runs by repository + workflow (+ branch)- Measures manual-trigger share vs total run volume- Tracks recent manual-trigger streaks (latest N runs)- Scores severity (`ok`, `warn`, `critical`) for operational risk gating- Emits text or JSON output for automation## InputsOptional:- `RUN_GLOB` (default: `artifacts/github-actions/*.json`)- `TOP_N` (default: `20`)- `OUTPUT_FORMAT` (`text` or `json`, default: `text`)- `GROUP_BY` (`workflow` or `workflow-branch`, default: `workflow`)- `MANUAL_EVENTS` (comma-separated, default: `workflow_dispatch,repository_dispatch`)- `RECENT_WINDOW` (latest runs inspected for streak, default: `5`)- `MIN_RUNS` (minimum runs required, default: `5`)- `WARN_MANUAL_RATIO` (0..1, default: `0.35`)- `CRITICAL_MANUAL_RATIO` (0..1, default: `0.65`)- `WARN_MANUAL_RUNS` (default: `5`)- `CRITICAL_MANUAL_RUNS` (default: `12`)- `WARN_RECENT_MANUAL_STREAK` (default: `3`)- `CRITICAL_RECENT_MANUAL_STREAK` (default: `5`)- `WORKFLOW_MATCH` / `WORKFLOW_EXCLUDE` (regex, optional)- `BRANCH_MATCH` / `BRANCH_EXCLUDE` (regex, optional)- `EVENT_MATCH` / `EVENT_EXCLUDE` (regex, optional)- `REPO_MATCH` / `REPO_EXCLUDE` (regex, optional)- `FAIL_ON_CRITICAL` (`0` or `1`, default: `0`)## Collect run JSON```bashgh run view <run-id> --json databaseId,workflowName,event,headBranch,conclusion,createdAt,updatedAt,url,repository \ > artifacts/github-actions/run-<run-id>.json```## RunText report:```bashRUN_GLOB='artifacts/github-actions/*.json' \bash skills/github-actions-manual-trigger-audit/scripts/manual-trigger-audit.sh```JSON output + fail gate:```bashRUN_GLOB='artifacts/github-actions/*.json' \OUTPUT_FORMAT=json \FAIL_ON_CRITICAL=1 \bash skills/github-actions-manual-trigger-audit/scripts/manual-trigger-audit.sh```Run against bundled fixtures:```bashRUN_GLOB='skills/github-actions-manual-trigger-audit/fixtures/*.json' \bash skills/github-actions-manual-trigger-audit/scripts/manual-trigger-audit.sh```## Output contract- Exit `0` in report mode (default)- Exit `1` when `FAIL_ON_CRITICAL=1` and one or more groups are critical- Text mode prints summary + ranked workflow groups- JSON mode prints summary + ranked groups + critical groups

Frequently asked questions

Github Actions Manual Trigger Audit