testland/notebook-ci-pipeline-author
The single home for Jupyter notebook testing: wires parameterized execution (papermill), output regression (nbval), function-level unit tests (testbook), output stripping (nbstripout), and artifact upload into one working GitHub Actions CI pipeline, with per-tool depth for papermill (parameters tag, CLI/API, sweeps) and nbval (strict/lax modes, per-cell markers, sanitize config) in references/. Includes a notebook PR review checklist covering untested notebooks, --nbval-lax misuse, hardcoded credentials, non-deterministic output cells, missing parameters tags, and committed outputs, with BLOCK / WARN / INFO severities and a BLOCK-or-PASS verdict. Use when notebooks must run as parameterized regression jobs in CI, when a repo ships .ipynb files whose outputs must stay stable, or when a PR that adds or modifies notebooks needs a structured quality review.
76
96%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The workflow uses GitHub Actions (kynan/nbstripout@main, actions/setup-python@v5, actions/upload-artifact@v4, actions/checkout@v4) which are fetched and executed at workflow runtime, meaning remote code from those repositories is run as required dependencies.
Where we found it
kynan/nbstripout@main
dependency · 2 sites
The plugin instructs using the kynan/nbstripout GitHub Action pinned to the mutable @main branch, meaning arbitrary upstream code changes are fetched and executed at workflow runtime.
SKILL.md
65
uses: kynan/nbstripout@main
references/notebook-ci-pipeline.md
39
uses: kynan/nbstripout@main
actions/setup-python@v5
dependency · 3 sites
The plugin instructs using the actions/setup-python GitHub Action pinned to a mutable tag @v5, fetching and executing remote code from that repository at workflow runtime.
SKILL.md
80
- uses: actions/setup-python@v5
references/nbval.md
107
uses: actions/setup-python@v5
references/notebook-ci-pipeline.md
43
- uses: actions/setup-python@v5
actions/upload-artifact@v4
dependency · 3 sites
The plugin instructs using the actions/upload-artifact GitHub Action pinned to a mutable tag @v4, fetching and executing remote code from that repository at workflow runtime.
SKILL.md
209
uses: actions/upload-artifact@v4
references/notebook-ci-pipeline.md
81
uses: actions/upload-artifact@v4
references/papermill.md
127
- uses: actions/upload-artifact@v4
actions/checkout@v4
dependency · 1 site
The plugin instructs using the actions/checkout GitHub Action pinned to a mutable tag @v4, fetching and executing remote code from that repository at workflow runtime.
references/notebook-ci-pipeline.md
36
- uses: actions/checkout@v4
- Audited
- Security analysis