3.1K skills · sorted by relevance
Review GitHub Actions workflows for unsafe input handling, excessive token permissions, exposed secrets, and changeable action references. Get findings grouped by issue type, with severity ratings, exact YAML locations, and concrete fixes to review.
Keep FastGPT build and test workflows aligned across GitHub Actions and Forgejo Actions. Adapt registry destinations, credentials, proxy settings, and platform-specific steps so the corresponding workflows support the internal network environment.
Use this skill when configuring object-specific quick actions or global actions in Salesforce: choosing between action types, editing action layouts, pre-filling fields with predefined values, and adding actions to Lightning page layouts or mobile navigation. Trigger keywords: quick action, global action, action layout, pre-fill fields, predefined values, Salesforce mobile actions. NOT for building an LWC that runs as a quick action — use lwc/lwc-quick-actions. NOT for converting Classic JavaScript or URL buttons — use admin/custom-button-to-action-migration. NOT for Dynamic Actions visibility rules on a Lightning record page — use admin/dynamic-forms-and-actions. Also covers the QuickAction metadata type: quickAction-meta.xml, quickActionLayout, fieldOverrides, targetObject, targetParentField, targetRecordType, flowDefinition, and the Layout platformActionList and quickActionList entries that place an action.
The English summary is being prepared. Showing the original description.
Operate the ClawSweeper maintenance bot for OpenClaw issues and pull requests, which are proposed code changes. Read findings, create repair jobs, monitor GitHub Actions, and manage automatic fixes or merges subject to authorization and validation checks.
Audit GitHub Actions workflows and run history to identify wasted automated checks and runner time. Get up to three evidence-based improvements aimed at reducing runtime or cost while preserving required validation.
Audit GitHub Actions workflows and CI/CD configurations for supply chain risks. Use Python and YAML parsing to identify unpinned actions, unsafe event expressions, excessive permissions, dependency confusion, and potential exposure of secrets in build pipelines.
Diagnose failed GitHub Actions runs using available job and step evidence. Identify the likely cause, propose a focused fix, and, when implementation is requested, update local code and run relevant checks while noting what needs remote verification.
Investigate failing GitHub Actions checks on a pull request using the GitHub CLI. The skill gathers logs, summarizes failures, and proposes a fix plan, then implements changes only after explicit approval and reports changes and tests.
Prepare and deploy static sites to Azure Static Web Apps with the SWA CLI. Set up local previews, configure routing and authentication, connect Azure Functions APIs, and arrange automated deployment through GitHub Actions.
Manage GitHub collaboration through the gh command-line tool and GitHub APIs. Create and review pull requests, organize issues, investigate failed Actions workflows, check automated tests before merging, and prepare releases with generated notes.
Investigate failed automated checks on GitHub pull requests using gh, GitHub’s command-line tool. Retrieve GitHub Actions logs, summarize failures, and propose a repair plan before implementing code changes with user approval.
Review Renovate pull requests that update GitHub Actions. Verify pinned commits against upstream version tags, inspect release notes for breaking changes, and check existing workflow settings before giving a clear recommendation on whether to merge.
Designing or reviewing Agentforce actions: Flow actions, Apex invocable actions, prompt-template actions, action naming, input and output contracts, confirmation requirements, and safe error behavior. Triggers: 'agent actions', 'build an agent that can look up an order', 'make the agent able to check order status', 'give the agent a capability', 'agent that can retrieve a record', 'flow action for agent', 'agent invocable action', 'action schema design'. NOT for writing the Apex class itself — use agentforce/custom-agent-actions-apex. NOT for the reason_code error envelope that stops an agent retry loop — use agentforce/agent-action-error-handling.
The English summary is being prepared. Showing the original description.
Migrating Classic Custom Buttons (Detail Page Buttons, List Buttons, Mass Action Buttons) and JavaScript Buttons to Lightning Quick Actions, Screen Flow Actions, LWC Quick Actions, and headless Quick Actions. Covers JavaScript-button-to-action translation patterns (sforce.apex.execute → Apex action, navigation alerts → toast events, MassAction.update → record-collection processing), URL button translation, and the irreversible loss of Classic JavaScript button capability in Lightning. NOT for new Quick Action design (use admin/global-actions-and-quick-actions) or Lightning record page composition (use admin/lightning-app-builder-advanced).
The English summary is being prepared. Showing the original description.
Build Playwright tests that reproduce browser interactions, organize reusable page operations, and run checks automatically. Investigate tests that fail inconsistently, and save screenshots, videos, and execution traces to help diagnose failures.
Review GitHub Actions workflows that run AI agents, tracing how external input reaches prompts and tools. Produce findings with evidence, severity, impact, and remediation guidance through static analysis, which examines configuration without running attacks.
Create GitHub Actions workflows to automate testing, builds, and deployments. Includes patterns for Docker image publishing, Kubernetes deployment, security scans, and testing across multiple environments, plus reusable workflows and approval steps for production releases.
Update GitHub Actions when workflow logs warn about deprecated runtimes. The skill guides compatible version selection, pins actions to exact commits, preserves existing workflow behavior, and checks execution results and outputs after the upgrade.
Turn an existing GitHub Actions workflow into a structured specification for maintenance and AI reference. Document its purpose, triggers, job dependencies, inputs, outputs, permissions, and failure handling, focusing on expected behavior rather than implementation details.
Set up CodeQL security scanning in GitHub Actions or with the local CLI. Get guidance on language settings, build steps, analysis rules, result uploads, and troubleshooting so you can configure scans and interpret their findings.
Build end-to-end tests that operate Windows desktop apps through pywinauto and Windows UI Automation, an interface for accessing screen controls. Covers stable element selection, waits, failure screenshots, test isolation, and CI setup for native applications.
Create and improve GitHub Actions workflows for automated testing and deployment. Coordinate multiple AI agents to review pull requests, investigate failed runs, scan for security issues, and manage releases across repositories.
Discover what a paired phone or wearable currently supports, then run the requested device, app, camera, media, or smart-home action. Check each device's published capabilities and permissions, and report the actual outcome or any execution errors.
Inspect project files to identify languages and build tools, then generate starter GitHub Actions or GitLab CI workflows. Set up automated checks, caching, and deployment stages that reflect the project’s commands and target environments.