研究检索敏感数据github未标认证来源可访问许可证需确认审计提醒

configure-workflows（配置工作流程）

Agent Skill

configure-workflows 用于查找、检索和筛选相关信息，适合在 Codex、Claude、Cursor、Gemini CLI 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态，以及是否会触发联网、命令执行或文件读写。

总安装

1,354

周安装

GitHub Stars

下载量

474

CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息，不托管安装包，也不代用户安装。

GitHub

来源数

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手，先确认命令和权限，再让它执行。

请帮我安装这个 Agent Skill：configure-workflows（配置工作流程）
来源仓库：https://github.com/laurigates/claude-plugins
仓库路径：skills/configure-workflows
安装命令：
npx skills add https://github.com/laurigates/claude-plugins --skill configure-workflows
安装前请先检查当前环境是否支持对应 CLI，并向我确认将要执行的命令、安装目录、联网范围和文件读写权限；确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill；本站只展示命令，不托管安装包，也不自动执行。

skills.shnpx skills

npx skills add https://github.com/laurigates/claude-plugins --skill configure-workflows

简介

用于检查和配置 GitHub Actions CI/CD 工作流是否符合项目标准。

适合需要标准化构建、测试和发布流程的团队。
可与 release-please 或可重用工作流配合使用，形成完整交付链。
安装前需确认是否包含系统命令执行权限，避免误改关键流水线。
configure-workflows 属于研究检索类 Skill，可作为该场景下的辅助能力补充。

SKILL.md

/configure:workflows

Check and configure GitHub Actions CI/CD workflows against project standards.

When to Use This Skill

Use this skill when...	Use another approach when...
Checking GitHub Actions workflows for compliance with project standards	Debugging a failing CI run (use github-actions-inspection skill)
Setting up container build, test, or release-please workflows	Installing Claude-powered reusable workflows (use `/configure:reusable-workflows`)
Updating outdated action versions (checkout, build-push, etc.)	Writing a custom workflow from scratch (use ci-workflows skill)
Adding multi-platform builds or GHA caching to existing workflows	Configuring security-specific workflows (use `/configure:security`)
Auditing which required workflows are missing from a project	Managing GitHub repository settings or branch protection rules

Context

Workflows dir:!find. -maxdepth 1 -type d -name \'.github/workflows\'
Workflow files:!find.github/workflows -maxdepth 1 $-name '*.yml' -o -name '*.yaml' $
Package files:!find. -maxdepth 1 $-name 'package.json' -o -name 'pyproject.toml' -o -name 'Cargo.toml' -o -name 'go.mod' $
Dockerfile:!find. -maxdepth 1 -name 'Dockerfile*'
Release-please config:!find. -maxdepth 1 -name \'release-please-config.json\'

Skills referenced: ci-workflows, github-actions-auth-security

Parameters

Parse from command arguments:

--check-only: Report status without offering fixes
--fix: Apply fixes automatically

Execution

Execute this GitHub Actions workflow configuration check:

Step 1: Fetch latest action versions

Verify latest versions before reporting outdated actions:

actions/checkout - releases
actions/setup-node - releases
actions/cache - releases
docker/setup-buildx-action - releases
docker/build-push-action - releases
docker/login-action - releases
docker/metadata-action - releases
reproducible-containers/buildkit-cache-dance - releases
google-github-actions/release-please-action - releases

Use WebSearch or WebFetch to verify current versions.

Step 2: Detect project type and list workflows

Check for .github/workflows/ directory
List all workflow files (*.yml, *.yaml)
Categorize workflows by purpose (container build, test, release)

Determine required workflows based on project type:

Project Type	Required Workflows
Frontend	container-build, release-please, renovate (optional: claude-auto-fix)
Python	container-build, release-please, test, renovate (optional: claude-auto-fix)
Infrastructure	release-please, renovate (optional: docs, claude-auto-fix)

Step 3: Analyze workflow compliance

Container Build Workflow Checks:

Check	Standard	Severity
checkout action	v4	WARN if older
build-push action	v6	WARN if older
Multi-platform	amd64 + arm64	WARN if missing
Registry	GHCR (ghcr.io)	INFO
Caching	GHA cache enabled	WARN if missing
Permissions	Explicit	WARN if missing
`id-token: write`	Required when provenance/SBOM enabled	WARN if missing
Cache scope	Explicit `scope=` when multiple build jobs	WARN if missing
Dead metadata tags	No `type=schedule` without schedule trigger	INFO
Semver regex escaping	Dots escaped in `type=match` patterns (`\d+\.\d+`)	WARN if unescaped
Hardcoded image names	Derive from `${{github.repository}}`	INFO if hardcoded
Digest output	Capture `build-push` digest via `id:` for traceability	INFO if missing
Job summary	Write image/digest/tags to `$GITHUB_STEP_SUMMARY`	INFO if missing
Duplicated job conditions	Identical `if:` on sibling jobs; suggest gate job	INFO

Release Please Workflow Checks:

Check	Standard	Severity
Action version	v4	WARN if older
Token	MY_RELEASE_PLEASE_TOKEN	WARN if GITHUB_TOKEN
Permissions	contents: write, pull-requests: write	FAIL if missing

Test Workflow Checks:

Check	Standard	Severity
Node version	22	WARN if older
Linting	npm run lint	WARN if missing
Type check	npm run typecheck	WARN if missing
Coverage	Coverage upload	INFO

Renovate Workflow Checks:

Check	Standard	Severity
RENOVATE_REPOSITORIES env var	Must be set (`${{github.repository}}`)	FAIL if missing
checkout action	v6	WARN if older
renovatebot/github-action	Minor-pinned (e.g., v46.1.0), not major tag	WARN if major-only
Uses reusable workflow	Preferred (except infrastructure)	INFO if standalone

Claude Auto-Fix Workflow Checks (if present):

Check	Standard	Severity
workflow_run trigger	Monitors at least one workflow	WARN if misconfigured
Loop prevention	Skips fix(auto): commits	FAIL if missing
Deduplication	Caps open auto-fix PRs	WARN if missing
Claude Code Action	anthropics/claude-code-action@v1	WARN if older
OAuth token	CLAUDE_CODE_OAUTH_TOKEN secret	FAIL if missing
Permissions	Minimal required set	WARN if excessive

Step 4: Generate compliance report

Print a formatted compliance report showing workflow status, per-workflow check results, and missing workflows.

If --check-only is set, stop here.

For the report format, see REFERENCE.md.

Step 5: Apply configuration (if --fix or user confirms)

Missing workflows: Create from standard templates
Outdated actions: Update version numbers
Missing multi-platform: Add platforms to build-push
Missing caching: Add GHA cache configuration

For standard templates (container build, test workflow), see REFERENCE.md.

Step 6: Update standards tracking

Update .project-standards.yaml:

components:
  workflows: "2025.1"

Agentic Optimizations

Context	Command
Quick compliance check	`/configure:workflows --check-only`
Auto-fix all issues	`/configure:workflows --fix`
List workflow files	`find.github/workflows -name '.yml' -o -name '.yaml'`
Check action versions	`rg 'uses:'.github/workflows/ --no-heading`
Verify release-please config	`test -f release-please-config.json && echo "EXISTS"`

Flags

Flag	Description
`--check-only`	Report status without offering fixes
`--fix`	Apply fixes automatically

适合场景

用户想查找某类 Agent Skill 时

需要根据任务场景推荐可安装能力包时

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明，方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用；具体调用方式请以来源页面和 README 为准。

平台分布

Claude

32.98%

按下载量换算156

Codex

32.71%

按下载量换算155

Cursor

20.23%

按下载量换算96

Gemini CLI

9.95%

按下载量换算47

安全审计

Gen Agent Trust Hub

通过

Socket

可疑

Snyk

可疑

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置，应进入高风险复核队列，默认不自动发布。

安装前确认

本站仅展示第三方公开信息，不托管安装包，不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果，不能写成本站确认安全。当前只有一个来源，正式发布前建议补源仓库或其他目录站核验。

来源信息

GitHub 仓库

github.com

/laurigates/claude-plugins

SKILL.md 来源

github.com

/laurigates/claude-plugins/tree/main/skills/configure-workflows

skills-sh

skills.sh

/laurigates/claude-plugins/configure-workflows

继续浏览同类 Skills

更多研究检索 Skills（73,675）返回 Skills 目录

上一个 Skill

configure-web-session（配置网络会话）

configure-web-session 用于查找、检索和筛选相关信息，适合在 Codex、Claude、Cursor、Gemini CLI 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态，以及是否会触发联网、命令执行或文件读写。

下一个 Skill

configuring（configuring 搜索）

configuring 用于查找、检索和筛选相关信息，适合在 Codex、Claude、Cursor、Gemini CLI 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态，以及是否会触发联网、命令执行或文件读写。