CtrlK
BlogDocsLog inGet started
Tessl Logo

claylo/actionista

GitHub Actions agent skill - helps create, review, and optimize workflows with up-to-date action versions and best practices

100

Quality

100%

Does it follow best practices?

Impact

Pending

No eval scenarios have been run

SecuritybySnyk

Passed

No known issues

Overview
Quality
Evals
Security
Files

Actionista

A Claude Code plugin for GitHub Actions — creates, reviews, and optimizes workflows with current action versions, SHA pinning, and best practices.

Installation

Via marketplace (recommended)

/plugin marketplace add claylo/claylo-marketplace
/plugin install actionista@claylo-marketplace

Standalone skill

The skills/actionista/ directory is a self-contained Agent Skill. Copy it into ~/.claude/skills/ or .claude/skills/ to use without the plugin wrapper.

You may also install actionista using npx skills.

npx skills add claylo/actionista

What it does

  • Tracks 260+ GitHub Actions with latest versions, SHAs, and migration diffs (updated daily)
  • Creates workflow YAML with correct permissions, concurrency, caching, and matrix builds
  • Reviews existing workflows for outdated actions, security issues, and performance problems
  • Detects local tooling (actionlint, act) and suggests installation if missing
  • Includes a workflow-analyzer subagent for proactive review after workflow edits

How it works

The skill activates automatically when you work with GitHub Actions — workflow files, CI/CD questions, or any action by name. No commands to remember.

"Set up a CI workflow for this Node.js project"
"What's the latest version of actions/checkout?"
"Review my workflows for security issues"
"Add caching to this build"

Actions index

The plugin maintains actions-index.json with version data for 264 actions across 20 categories:

CategoryExamples
Corecheckout, cache, upload-artifact, github-script
Languagessetup-node, setup-python, setup-go, setup-java, rust-toolchain
Build toolsgradle, cmake, cargo, sccache, ccache
Package managerspnpm, npm, rust-cache, poetry, miniconda
Testingpytest, vitest, jest, cargo-test
Lintingeslint, ruff, clippy, rustfmt
Cloudaws-actions/*, azure/*, google-github-actions/*
Infrastructureterraform, ansible, cloudformation, pulumi
Kuberneteskubectl, helm, kind, k3s, argocd
Dockerbuild-push-action, login-action, metadata-action
Securitycodeql-action, trivy-action, trufflehog
Releaserelease-please-action, goreleaser-action, action-gh-release
Git operationsgit-auto-commit, create-pull-request, tag
Notificationsslack-github-action, discord, teams
Documentationmkdocs, sphinx, typedoc, hugo
Mobileflutter, react-native, xcode, eas
AI assistantsclaude, chatgpt, codex
Utilitiesmiscellaneous utility actions

Each entry includes the latest version, full version tag, commit SHA for pinning, input parameters, deprecated versions, and migration data for major version bumps.

The index updates daily via GitHub Actions. Run it manually:

skills/actionista/scripts/update-index

Requires gh (authenticated), yq, and jq.

Skill contents

All reference material lives in skills/actionista/references/:

TopicFiles
Workflow syntax, expressions, triggersworkflow-syntax.md, expressions.md, triggers.md
Runners, permissions, troubleshootingrunners.md, permissions.md, troubleshooting.md
Patternspatterns-*.md (matrix, caching, artifacts, reusable workflows, concurrency, environments, composite actions)
Securitysecurity-*.md (secrets/OIDC, hardening, supply chain)
Schemagithub-action.schema.json

Working templates in examples/: Node.js CI, Rust CI, AWS deployment with OIDC, release-please.

Contributing

Contributions welcome:

  • Add actions to skills/actionista/tracked-actions.yaml
  • Improve reference docs or add examples
  • Report issues with version detection or migration data

License

MIT

Workspace
claylo
Visibility
Public
Created
Last updated
Publish Source
CLI
Badge
claylo/actionista badge