Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/squadcodercom/squadcoder/github-actions-ilnpx skills add squadcodercom/squadcoder --skill github-actions-ilgit clone --depth 1 https://github.com/squadcodercom/squadcoderWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00258 | $0.06598 |
| Opus 5 | $0.00129 | $0.03299 |
| Sonnet 5 | $0.00052 | $0.01320 |
| Haiku 4.5 | $0.00026 | $0.00660 |
Grade A, and why
github-actions-il scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
allowed-tools: Bash(gh:*) Bash(git:*) Bash(curl:*) Bash(node:*) Bash(act:*) How it starts
The opening of the file, as written. The whole thing — 586 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitHub Actions for Israeli Teams
Instructions
Step 1: Choose the Right Workflow Pattern
Match the team's need to the appropriate workflow template. Use this table as a starting point, then customize based on the project's stack and deployment target.
| Israeli Dev Need | Workflow Template | Key Actions / Tools |
|---|---|---|
| Shabbat/holiday deploy freeze | shabbat-deploy-freeze.yml |
hebcal API, cron schedule, environment protection rules |
| Hebrew Slack notifications | hebrew-notifications.yml |
Slack Incoming Webhook, RTL text payload |
| Hebrew Teams notifications | hebrew-notifications.yml |
Teams Incoming Webhook, Adaptive Card with RTL |
| IS-5568 accessibility check | compliance-checks.yml |
axe-core, pa11y, custom IS-5568 rules |
| Privacy compliance (GDPR-IL) | compliance-checks.yml |
custom scanner, dependency audit |
| Monday.com issue sync | monday-sync.yml |
Monday.com GraphQL API |
| Vercel fra1 deployment | deploy-vercel.yml |
vercel CLI with --regions fra1 |
| Supabase migration CI | supabase-ci.yml |
supabase CLI, migration diff |
| Hebrew i18n validation | i18n-validation.yml |
custom script, JSON/YAML schema check |
| Israeli work week scheduling | Any workflow | Cron with Sun-Thu schedule |
If the team has multiple needs, compose workflows by reusing composite actions from references/workflow-templates.md.
Step 2: Set Up Shabbat/Holiday-Aware Scheduling
Israeli teams need deployment schedules that respect Shabbat (Friday afternoon through Saturday night) and Jewish holidays. This is not just cultural preference; deploying during Shabbat means no one is available to respond to incidents.
Approach: Hebcal API + Environment Protection Rules
- Create a reusable workflow that checks whether the current time falls within a freeze window:
# .github/actions/shabbat-check/action.yml
name: 'Shabbat/Holiday Check'
description: 'Check if current time is during Shabbat or Israeli holiday'
outputs:
is_frozen:
description: 'true if deploys should be frozen'
value: ${{ steps.check.outputs.frozen }}
reason:
description: 'Why deploys are frozen (e.g., Shabbat, Yom Kippur)'
value: ${{ steps.check.outputs.reason }}
runs:
using: 'composite'
steps:
- id: check
shell: bash
run: |
# Fetch Shabbat times for Israel (Jerusalem)
SHABBAT_JSON=$(curl -s "https://www.hebcal.com/shabbat?cfg=json&geonameid=281184&M=on")
# Extract candle lighting and havdalah times
CANDLE=$(echo "$SHABBAT_JSON" | jq -r '.items[] | select(.category=="candles") | .date')
HAVDALAH=$(echo "$SHABBAT_JSON" | jq -r '.items[] | select(.category=="havdalah") | .date')
NOW=$(date -u +%Y-%m-%dT%H:%M:%S)
if [[ "$NOW" > "$CANDLE" && "$NOW" < "$HAVDALAH" ]]; then
echo "frozen=true" >> $GITHUB_OUTPUT
echo "reason=Shabbat (candle lighting: $CANDLE)" >> $GITHUB_OUTPUT
else
# Check holidays
MONTH=$(date +%Y-%m)
HOLIDAYS=$(curl -s "https://www.hebcal.com/shabbat?cfg=json&geonameid=281184&maj=on")
HOLIDAY_TODAY=$(echo "$HOLIDAYS" | jq -r ".items[] | select(.date | startswith(\"$(date +%Y-%m-%d)\")) | .title" | head -1)
if [[ -n "$HOLIDAY_TODAY" ]]; then
echo "frozen=true" >> $GITHUB_OUTPUT
echo "reason=Holiday: $HOLIDAY_TODAY" >> $GITHUB_OUTPUT
else
echo "frozen=false" >> $GITHUB_OUTPUT
echo "reason=none" >> $GITHUB_OUTPUT
fi
fi
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 586 lines · 258 tokens per session scan A 471e052cab3e
github-actions-il is a skill published in the GitHub repository squadcodercom/squadcoder (11 stars, last pushed 2mo ago), licensed MIT. It adds 258 tokens to every session and 6,598 once invoked, about $0.0013 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
product-capability
Translate PRD intent, roadmap asks, or product discussions into an implementation-ready capability plan that exposes constraints, invariants, interfaces, and unresolved decisions before multi-service work starts. Use when the user needs an ecc-native PRD-to-SRS lane instead of vague planning prose.
kl-consistency-test
Write, calibrate, and debug the prefill-vs-decode logprob (KL) consistency tests in sglang -- the two independent conditions a zero requires (every operator batch-invariant, and the two paths computing the same function), which helper separates them, how to pick a threshold once they hold, and how to localize a…
i18n-localization
Internationalization and localization patterns. Detecting hardcoded strings, managing translations, locale files, RTL support.
baoyu-youtube-transcript
Downloads YouTube video transcripts/subtitles and cover images by URL or video ID. Supports multiple languages, translation, chapters, and speaker identification. Caches raw data for fast re-formatting. Use when user asks to "get YouTube transcript", "download subtitles", "get captions", "YouTube字幕", "YouTube封面"…
indication-dossier
Build a source-backed biomedical indication dossier. Use when a research task asks for disease biology, target rationale, patient segmentation, biomarkers, trials, drugs, competitive landscape, or translational evidence.
harness-setup
HAR: Project init, tool setup, agent config, memory setup, skill mirror sync. Trigger: setup, init, new project, CI/Codex setup, harness-mem, mirror. Do NOT load for: implementation, review, release, planning.