agentic-actions-auditor: Auditing Security Risks in AI Agent Integrations for GitHub Actions
agentic-actions-auditor is a Skill in the Trail of Bits skills marketplace for statically auditing GitHub Actions workflows that invoke Claude Code Action, OpenAI Codex, Gemini CLI, or GitHub AI Inference. It guides an Agent to discover workflows, identify AI steps, trace composite/reusable references, and detect vectors such as environment variable relay, expression injection, unsafe sandboxing, and wildcard user allowlists. It supports local Glob scanning and fetching remote repositories via the gh api. It is intended for security review before an Agent is integrated into CI, and does not perform runtime exploitation or automatic file modification.
Read Morecicd-pipeline-skill: Generating Cross-Platform CI/CD Pipeline Configurations for Test Automation
cicd-pipeline-skill is a DevOps Agent Skill (MIT License, v1.0) provided by TestMu AI in the agent-skills repository. It generates GitHub Actions, Jenkins, GitLab CI, and Azure DevOps pipeline configurations for test automation and includes integration examples for local Playwright and TestMu AI cloud testing. After installing it with npx agentskillsforall, you can describe CI/CD requirements in natural language in assistants such as Cursor to align with the official Core Patterns. The article covers multi-platform configuration files and secret locations, representative YAML snippets, and usage considerations.
Read MoreDeepSeek Harness (DSH) plugin: dsh-pr-checks sidebar displays PR check status
The DSH plugin `dsh-pr-checks` aims to solve the problem of frequent PR build-status checks interrupting workflows during agent development. It uses the `gh` CLI to move GitHub Actions status to the bottom of the sidebar, supports hierarchical display by Workspace, Project, and PR, and provides progress bars and color-coded status dots. It features automatic filtering of in-progress tasks, configurable filtering (for example, by specific user or repository), and non-invasive installation. Installation requires `gh` CLI authentication and can be enabled via command line or manual configuration.
Read Moredsh-github-ci: GitHub Actions CI Management and Visualization Tool
The `dsh-github-ci` plugin for DeepSeek Harness (DSH) is designed to integrate GitHub Actions into DSH's unified interface, addressing the pain point of developers frequently switching between the browser and terminal. It provides a Pipeline Dashboard for real-time monitoring, log viewing, and operations such as canceling or retrying. It also encapsulates the `github_ci` Agent tool, enabling developers to directly trigger, troubleshoot, and fix workflows through conversation. The plugin supports GitHub OAuth Device Flow or PAT authentication, stores permissions persistently, and features failure detection with one-click repair, achieving automated and seamless management of CI processes.
Read Moredsh-onfail: Handling GitHub Actions Failures in DSH
dsh-onfail is a network tool plugin for DeepSeek Harness (DSH), designed to reduce the cognitive overhead of frequently switching contexts when CI failures occur. It polls GitHub Actions statuses at regular intervals and displays cards for failed Jobs in the DSH web interface sidebar. By clicking a card, users can address the error within the current session without leaving the interface. The plugin supports token authentication and fixture mode, making it suitable for development scenarios that require fixing CI errors “in place.”
Read Moreci-runner: Trigger GitHub Actions Workflows and Diagnose Failed DSH Plugins
`ci-runner` is a DSH plugin that unifies GitHub Actions trigger initiation, status querying, and log viewing into a single tool. It supports streaming log output, uses DeepSeek to automatically generate fault diagnosis reports, and provides a secure credential handling solution with zero runtime dependencies. With simple configuration, the plugin enables automated CI workflows and self-healing troubleshooting.
Read More@angel-gp/dsh-client-ui-gitpeek: A GitHub Data Dashboard for DeepSeek Harness
`@angel-gp/dsh-client-ui-gitpeek` is a DSH plugin that displays Actions, Commits, and Releases side by side directly within the session interface. It supports encrypted storage of PAT tokens, pagination, and automatic refresh. To install it, ensure the environment meets the required conditions and run the installation command in the corresponding profile. Once a PAT is configured, you can view the data. The tool optimizes status monitoring in agent development by reducing context switching.
Read Moredsh-ci-doctor: Monitoring GitHub Actions Failures and Generating Structured Diagnostics
`dsh-ci-doctor` is a DeepSeek Harness (DSH) plugin designed to address the pain point of tedious log analysis after GitHub Actions failures. The plugin provides two core capabilities: monitoring and diagnosis. Through `ci_watch`, it launches a background task that polls for new failed runs and sets a baseline to avoid false positives from historical failures; through `ci_diagnose`, it transforms raw logs into structured findings, generating a Markdown diagnostic card containing normalized error signatures, failure categories, and suspicious files. The plugin strictly adheres to a read-only contract, only reading GitHub states without performing write operations such as pushing, merging, or re-running. It relies on an authenticated GitHub CLI session and supports starting monitoring or diagnosing specified runs via natural language instructions. In addition, the plugin features signature
Read MoreDiagnose GitHub Actions Failures Before Opening Logs with dsh-ci-doctor
### 译文1（正式学术/技术文档译法）： `dsh-ci-doctor` is a DeepSeek Harness community plugin maintained by jkrandom-sudo. It uses `ci_watch` to monitor newly failed GitHub Actions runs, and `ci_diagnose` to aggregate raw logs into diagnostic cards with normalized signatures, failure categories and suspected files. This article verifies the installation commands, read-only contract and configuration items based on the directory page, GitHub README and npm registry. --- ### 译文2（更贴合开源社区常用表述的口语化译法）： `dsh-ci-doctor` is a community plugin for DeepSeek Harness built by jkrandom-sudo. It leverages `ci_watch` to track new failed GitHub Actions jobs, and `ci_diagnose` to pack raw logs into diagnostic cards that come with normalized signatures, failure classifications and suspicious files involved. This piece goes through checking the installation commands, read-only covenant and configuration settings via the directory page, GitHub README and npm.
Read More### 正式译法（适配技术文档场景）： Setting up CI: Let AI Agents Help You Build GitHub Actions CI/CD Pipelines
# setup-ci from awesome-cursor-skills: A beginner-friendly DevOps skill for GitHub Actions This skill detects Node.js, Python, Go and other projects via the SKILL.md specification, then generates a `ci.yml` workflow that includes linting, testing, type checking and optional deployment. It emphasizes the use of `npm ci`, dependency caching and secret security best practices. This article covers installation (deploying to `.cursor/skills/`), typical usage and precautions, and is ideal for quickly setting up CI/CD for new projects.
Read Moregh-fix-ci: Use GitHub CLI to let AI help you debug failed CI checks on PRs
If your CI fails before a PR is merged, do you have to switch back and forth between the Actions page and your terminal to check logs? The officially curated OpenAI skill `gh-fix-ci` is specifically designed for GitHub Actions failure troubleshooting: it pulls PR checks and run logs via the GitHub CLI, uses bundled scripts to automatically extract error snippets, provides a repair plan first, and waits for approval before you modify the code. This article introduces the positioning of this skill, the usage of `inspect_pr_checks.py`, as well as the installation and enabling methods in tools such as Codex and Cursor.
Read More