Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/squadcodercom/squadcodernpx agentmods add skills/squadcodercom/squadcoder/github-actions-ilWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/squadcodercom/squadcoder/github-actions-il)<a href="https://agentmods.dev/skills/squadcodercom/squadcoder/github-actions-il"><img src="https://agentmods.dev/badge/skills/squadcodercom/squadcoder/github-actions-il/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/squadcodercom/squadcoder/github-actions-il"><img src="https://agentmods.dev/badge/skills/squadcodercom/squadcoder/github-actions-il.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00258 | $0.06598 |
| Opus 5.5 | $0.00103 | $0.02639 |
| Sonnet 5.5 | $0.00052 | $0.01320 |
| Haiku 4.5 | $0.00026 | $0.00660 |
Grade A, and why
github-actions-il scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
allowed-tools: Bash(gh:*) Bash(git:*) Bash(curl:*) Bash(node:*) Bash(act:*) How it starts
The opening of the file, as written. The whole thing — 586 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitHub Actions for Israeli Teams
Instructions
Step 1: Choose the Right Workflow Pattern
Match the team's need to the appropriate workflow template. Use this table as a starting point, then customize based on the project's stack and deployment target.
| Israeli Dev Need | Workflow Template | Key Actions / Tools |
|---|---|---|
| Shabbat/holiday deploy freeze | shabbat-deploy-freeze.yml |
hebcal API, cron schedule, environment protection rules |
| Hebrew Slack notifications | hebrew-notifications.yml |
Slack Incoming Webhook, RTL text payload |
| Hebrew Teams notifications | hebrew-notifications.yml |
Teams Incoming Webhook, Adaptive Card with RTL |
| IS-5568 accessibility check | compliance-checks.yml |
axe-core, pa11y, custom IS-5568 rules |
| Privacy compliance (GDPR-IL) | compliance-checks.yml |
custom scanner, dependency audit |
| Monday.com issue sync | monday-sync.yml |
Monday.com GraphQL API |
| Vercel fra1 deployment | deploy-vercel.yml |
vercel CLI with --regions fra1 |
| Supabase migration CI | supabase-ci.yml |
supabase CLI, migration diff |
| Hebrew i18n validation | i18n-validation.yml |
custom script, JSON/YAML schema check |
| Israeli work week scheduling | Any workflow | Cron with Sun-Thu schedule |
If the team has multiple needs, compose workflows by reusing composite actions from references/workflow-templates.md.
Step 2: Set Up Shabbat/Holiday-Aware Scheduling
Israeli teams need deployment schedules that respect Shabbat (Friday afternoon through Saturday night) and Jewish holidays. This is not just cultural preference; deploying during Shabbat means no one is available to respond to incidents.
Approach: Hebcal API + Environment Protection Rules
- Create a reusable workflow that checks whether the current time falls within a freeze window:
# .github/actions/shabbat-check/action.yml
name: 'Shabbat/Holiday Check'
description: 'Check if current time is during Shabbat or Israeli holiday'
outputs:
is_frozen:
description: 'true if deploys should be frozen'
value: ${{ steps.check.outputs.frozen }}
reason:
description: 'Why deploys are frozen (e.g., Shabbat, Yom Kippur)'
value: ${{ steps.check.outputs.reason }}
runs:
using: 'composite'
steps:
- id: check
shell: bash
run: |
# Fetch Shabbat times for Israel (Jerusalem)
SHABBAT_JSON=$(curl -s "https://www.hebcal.com/shabbat?cfg=json&geonameid=281184&M=on")
# Extract candle lighting and havdalah times
CANDLE=$(echo "$SHABBAT_JSON" | jq -r '.items[] | select(.category=="candles") | .date')
HAVDALAH=$(echo "$SHABBAT_JSON" | jq -r '.items[] | select(.category=="havdalah") | .date')
NOW=$(date -u +%Y-%m-%dT%H:%M:%S)
if [[ "$NOW" > "$CANDLE" && "$NOW" < "$HAVDALAH" ]]; then
echo "frozen=true" >> $GITHUB_OUTPUT
echo "reason=Shabbat (candle lighting: $CANDLE)" >> $GITHUB_OUTPUT
else
# Check holidays
MONTH=$(date +%Y-%m)
HOLIDAYS=$(curl -s "https://www.hebcal.com/shabbat?cfg=json&geonameid=281184&maj=on")
HOLIDAY_TODAY=$(echo "$HOLIDAYS" | jq -r ".items[] | select(.date | startswith(\"$(date +%Y-%m-%d)\")) | .title" | head -1)
if [[ -n "$HOLIDAY_TODAY" ]]; then
echo "frozen=true" >> $GITHUB_OUTPUT
echo "reason=Holiday: $HOLIDAY_TODAY" >> $GITHUB_OUTPUT
else
echo "frozen=false" >> $GITHUB_OUTPUT
echo "reason=none" >> $GITHUB_OUTPUT
fi
fi
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 586 lines · 258 tokens per session scan A 471e052cab3e
github-actions-il is a skill published in the GitHub repository squadcodercom/squadcoder (12 stars, last pushed 3mo ago), licensed MIT. It adds 258 tokens to every session and 6,598 once invoked, about $0.0010 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
hatch3r-release
Cuts a release with version bump, changelog, tagging, and deploy verification. Use when preparing a release, cutting a version, or deploying to production.
hatch3r-gh-agentic-workflows
Sets up CI/CD agentic workflows for continuous AI-powered repository automation (GitHub Actions, Azure Pipelines, GitLab CI).
hatch3r-ci-pipeline
Designs and optimizes CI/CD pipelines. Covers stage design, test parallelization, artifact management, and pipeline performance.
atmos-hooks
Atmos hooks: lifecycle events, hook kinds, command/store/git/security hooks, step/steps hooks, when: conditions, scoping and overrides, toolchain integration, --skip-hooks, and Atmos Pro/local output.
atmos-modernization
Atmos Modernization: migrate deprecated or legacy Atmos patterns to current names, Native CI, Atmos Pro drift detection, dependencies.components, nametemplate, and declared secrets.
atmos-sbom
Atmos SBOM provenance: CycloneDX and SPDX generation from vendor and Terraform evidence, coverage diagnostics, NTIA validation, and native CI workflow-artifact publication.