Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Unique-Divine/jiyuu --skill gh-actionlintgit clone --depth 1 https://github.com/Unique-Divine/jiyuuWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/unique-divine/jiyuu/gh-actionlint)<a href="https://agentmods.dev/skills/unique-divine/jiyuu/gh-actionlint"><img src="https://agentmods.dev/badge/skills/unique-divine/jiyuu/gh-actionlint/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/unique-divine/jiyuu/gh-actionlint"><img src="https://agentmods.dev/badge/skills/unique-divine/jiyuu/gh-actionlint.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00085 | $0.00793 |
| Opus 5 | $0.00043 | $0.00396 |
| Sonnet 5 | $0.00017 | $0.00159 |
| Haiku 4.5 | $0.00009 | $0.00079 |
Grade A, and why
gh-actionlint scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 100 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GH Actionlint
Purpose
Use actionlint to catch GitHub Actions workflow mistakes before CI does:
YAML syntax errors, invalid workflow keys, expression mistakes, bad needs
references, invalid triggers, and other common Actions-specific issues.
Generic YAML linters are useful for indentation, but they do not understand GitHub Actions semantics. Prefer this skill whenever the file is a GitHub Actions workflow.
When To Use
Use this skill when:
- The user asks to check, lint, validate, or debug GitHub Actions workflows.
- You modify files under
.github/workflows/. - CI fails with workflow parsing, expression, trigger,
needs, matrix, or Actions schema errors. - The user asks whether a workflow step shape is valid, such as an unnamed
run:step.
Workflow
- Work from the repository root when possible.
- Identify the workflow targets:
- If the user named specific files, check those files.
- Otherwise, check
.github/workflows/.
- Choose the runner:
- If
bunis available, usebunx github-actionlint. - Otherwise, if
npxis available, usenpx --yes github-actionlint. - If neither exists, tell the user that
bunornpxis needed.
- If
- Run actionlint.
- Report whether the workflows passed. If there are failures, quote the relevant actionlint messages and suggest the smallest fix.
Commands
Check all workflows:
if command -v bun >/dev/null 2>&1; then
bunx github-actionlint .github/workflows/
elif command -v npx >/dev/null 2>&1; then
npx --yes github-actionlint .github/workflows/
else
echo "need bun or npx on PATH" >&2
exit 1
fi
Check specific workflow files:
if command -v bun >/dev/null 2>&1; then
bunx github-actionlint .github/workflows/tests.yaml
elif command -v npx >/dev/null 2>&1; then
npx --yes github-actionlint .github/workflows/tests.yaml
else
echo "need bun or npx on PATH" >&2
exit 1
fi
Use -color -verbose when extra diagnostics are helpful:
bunx github-actionlint -color -verbose .github/workflows/
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 100 lines · 85 tokens per session scan A 2eaf46f901b8
gh-actionlint is a skill published in the GitHub repository Unique-Divine/jiyuu (6 stars, last pushed 2d ago), licensed MIT. It adds 85 tokens to every session and 793 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
go-delivery-platform
Release gates. Use when CI/CD, artifact provenance, drift, containers, migrations, rollout, or control-plane evidence determines whether a candidate may ship.
golang-continuous-integration
CI/CD pipeline configuration using GitHub Actions for Golang projects — testing, linting, SAST, security scanning, code coverage, Dependabot, Renovate, GoReleaser, code review automation, and release pipelines. Use when setting up or improving Go project CI, configuring GitHub Actions workflows, adding linters or…
ci
Configure Ginkgo for continuous integration — the recommended CLI flag set and the rationale for each flag (-r -p --randomize-all --randomize-suites --fail-on-pending --fail-on-empty --keep-going --cover --race --trace --json-report --timeout --poll-progress-after/-interval), invoking via go run to pin the CLI to…
migrate-goldmark-extension-v1-to-v2
Migrate goldmark extension from goldmark v1 to v2.
use-modern-go
Use the Modern Go Guidelines CLI whenever writing, modifying, fixing, or refactoring Go code. Apply its version-specific guidance to generated changes.
readme-generate
A tool that analyzes source code to generate English and Chinese README files and related project documentation.