How do I install the Pipeline skill?

Run npx skillmds add majiayu000/pipeline-4 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Pipeline safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Pipeline?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Pipeline free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Pipeline?

majiayu000 (@majiayu000) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Pipeline by majiayu000 — Agent Skill

Name: Pipeline
Rating: 4.666666666666667 (3 reviews)
Author: majiayu000

File contents

CI/CD Pipeline

Router skill for CI/CD pipeline generation. Dispatches to handler files based on sub-command.

When to Use

Creating new CI/CD pipelines for a project.
Evolving existing pipelines with advanced patterns.
Validating pipeline compliance (SHA pinning, timeouts, concurrency).
NOT for running pipelines -- that is the CI system's job.

Routing

Sub-command	Handler	Purpose
`generate`	`handlers/generate.md`	Create new pipeline from project analysis
`evolve`	`handlers/evolve.md`	Add advanced patterns to existing pipeline
`validate`	`handlers/validate.md`	Check pipeline compliance

Default (no sub-command): generate.

Quick Reference

/ai-pipeline generate                    # new pipeline from project analysis
/ai-pipeline generate --provider azure   # Azure Pipelines specifically
/ai-pipeline evolve                      # add advanced patterns
/ai-pipeline validate                    # check compliance

Shared Rules

SHA pinning: all third-party actions use SHA pins. First-party (actions/*) may use major tags.
No * versions: explicit version constraints always.
OIDC auth: prefer OIDC over long-lived secrets.
Timeouts: every job must have timeout-minutes.
Concurrency: group by branch to prevent parallel runs.

Integration

Stack detection: reads pyproject.toml, *.csproj, package.json, Cargo.toml.
Validation: actionlint for GitHub Actions.
Policy: scripts/check_workflow_policy.py for SHA pinning and timeout compliance.

References

.ai-engineering/manifest.yml -- CI/CD standards.
.ai-engineering/contexts/ -- per-stack check definitions. $ARGUMENTS

---name: pipeline-4description: Use when creating or evolving CI/CD pipelines: stack-aware generation for GitHub Actions and Azure Pipelines with security enforcement.--- # CI/CD Pipeline Router skill for CI/CD pipeline generation. Dispatches to handler files based on sub-command. ## When to Use - Creating new CI/CD pipelines for a project. - Evolving existing pipelines with advanced patterns. - Validating pipeline compliance (SHA pinning, timeouts, concurrency). - NOT for running pipelines -- that is the CI system's job. ## Routing | Sub-command | Handler | Purpose | |-------------|---------|---------| | `generate` | `handlers/generate.md` | Create new pipeline from project analysis | | `evolve` | `handlers/evolve.md` | Add advanced patterns to existing pipeline | | `validate` | `handlers/validate.md` | Check pipeline compliance | Default (no sub-command): `generate`. ## Quick Reference ``` /ai-pipeline generate # new pipeline from project analysis /ai-pipeline generate --provider azure # Azure Pipelines specifically /ai-pipeline evolve # add advanced patterns /ai-pipeline validate # check compliance ``` ## Shared Rules - **SHA pinning**: all third-party actions use SHA pins. First-party (`actions/*`) may use major tags. - **No `*` versions**: explicit version constraints always. - **OIDC auth**: prefer OIDC over long-lived secrets. - **Timeouts**: every job must have `timeout-minutes`. - **Concurrency**: group by branch to prevent parallel runs. ## Integration - Stack detection: reads `pyproject.toml`, `*.csproj`, `package.json`, `Cargo.toml`. - Validation: `actionlint` for GitHub Actions. - Policy: `scripts/check_workflow_policy.py` for SHA pinning and timeout compliance. ## References - `.ai-engineering/manifest.yml` -- CI/CD standards. - `.ai-engineering/contexts/` -- per-stack check definitions. $ARGUMENTS

Frequently asked questions