claylo/actionista
GitHub Actions agent skill - helps create, review, and optimize workflows with up-to-date action versions and best practices
100
100%
Does it follow best practices?
Impact
Pending
No eval scenarios have been run
Passed
No known issues
README.md
Actionista
A Claude Code plugin for GitHub Actions — creates, reviews, and optimizes workflows with current action versions, SHA pinning, and best practices.
Installation
Via marketplace (recommended)
/plugin marketplace add claylo/claylo-marketplace
/plugin install actionista@claylo-marketplaceStandalone skill
The skills/actionista/ directory is a self-contained Agent Skill. Copy it into ~/.claude/skills/ or .claude/skills/ to use without the plugin wrapper.
You may also install actionista using npx skills.
npx skills add claylo/actionistaWhat it does
- Tracks 260+ GitHub Actions with latest versions, SHAs, and migration diffs (updated daily)
- Creates workflow YAML with correct permissions, concurrency, caching, and matrix builds
- Reviews existing workflows for outdated actions, security issues, and performance problems
- Detects local tooling (
actionlint,act) and suggests installation if missing - Includes a workflow-analyzer subagent for proactive review after workflow edits
How it works
The skill activates automatically when you work with GitHub Actions — workflow files, CI/CD questions, or any action by name. No commands to remember.
"Set up a CI workflow for this Node.js project"
"What's the latest version of actions/checkout?"
"Review my workflows for security issues"
"Add caching to this build"Actions index
The plugin maintains actions-index.json with version data for 264 actions across 20 categories:
| Category | Examples |
|---|---|
| Core | checkout, cache, upload-artifact, github-script |
| Languages | setup-node, setup-python, setup-go, setup-java, rust-toolchain |
| Build tools | gradle, cmake, cargo, sccache, ccache |
| Package managers | pnpm, npm, rust-cache, poetry, miniconda |
| Testing | pytest, vitest, jest, cargo-test |
| Linting | eslint, ruff, clippy, rustfmt |
| Cloud | aws-actions/*, azure/*, google-github-actions/* |
| Infrastructure | terraform, ansible, cloudformation, pulumi |
| Kubernetes | kubectl, helm, kind, k3s, argocd |
| Docker | build-push-action, login-action, metadata-action |
| Security | codeql-action, trivy-action, trufflehog |
| Release | release-please-action, goreleaser-action, action-gh-release |
| Git operations | git-auto-commit, create-pull-request, tag |
| Notifications | slack-github-action, discord, teams |
| Documentation | mkdocs, sphinx, typedoc, hugo |
| Mobile | flutter, react-native, xcode, eas |
| AI assistants | claude, chatgpt, codex |
| Utilities | miscellaneous utility actions |
Each entry includes the latest version, full version tag, commit SHA for pinning, input parameters, deprecated versions, and migration data for major version bumps.
The index updates daily via GitHub Actions. Run it manually:
skills/actionista/scripts/update-indexRequires gh (authenticated), yq, and jq.
Skill contents
All reference material lives in skills/actionista/references/:
| Topic | Files |
|---|---|
| Workflow syntax, expressions, triggers | workflow-syntax.md, expressions.md, triggers.md |
| Runners, permissions, troubleshooting | runners.md, permissions.md, troubleshooting.md |
| Patterns | patterns-*.md (matrix, caching, artifacts, reusable workflows, concurrency, environments, composite actions) |
| Security | security-*.md (secrets/OIDC, hardening, supply chain) |
| Schema | github-action.schema.json |
Working templates in examples/: Node.js CI, Rust CI, AWS deployment with OIDC, release-please.
Contributing
Contributions welcome:
- Add actions to
skills/actionista/tracked-actions.yaml - Improve reference docs or add examples
- Report issues with version detection or migration data
License
MIT
skills
actionista
agents
references