github-actions-facts
GitHub Actions defaults that are easy to assume wrong, and how to check them.
Skill by threeal
Chalk Labs
Need help deploying github-actions-facts?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/threeal-github-actions-facts
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: devops, security, writing, productivity
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/github-actions-facts
What's inside
- Skill name
github-actions-facts- Description
- GitHub Actions defaults that are easy to assume wrong, and how to check them. TRIGGER - editing/reviewing a .github/workflows/*.yaml file, or discussing GITHUB_TOKEN permissions, workflow default permissions, or GitHub Actions security defaults.
- License
- MIT
- Instructions
- 13 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
When writing or changing a value in the file, also follow `yaml-conventions`. ## GITHUB_TOKEN Default Permissions Don't assume a repo's default `GITHUB_TOKEN` permissions — check them: ``` gh api repos/<owner>/<repo>/actions/permissions/workflow ``` Why: the read-only default ([since February 2023](https://github.blog/changelog/2023-02-02-github-actions-updating-the-default-github_token-permissions-to-read-only/)) applies only to repos created after that change, and it's a repo/org/enterprise setting (Settings → Actions → General → Workflow permissions) that anyone can flip. An older repo, or one where someone selected "Read and write permissions," defaults to read-write instead.
From threeal/.claude, MIT.
More from threeal/.claude
- 0.587score
github-writing-conventions
threeal
Conventions for GitHub-facing text — issue and PR narration, screenshots, title casing, cross-repo references, repo descriptions, and repo topics.
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
lefthook-conventions
threeal
Lefthook (lefthook.dev) git hook manager configuration — hook-level and job-level options, what piped/parallel/fail_on_changes actually do, and this repo's…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
repo-lineage-uniformity
threeal
Keep shared config, docs, and structure uniform across the hierarchy of related threeal repos derived from one another.
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
repo-lineage-sync
threeal
Process for catching a threeal repo up with changes its lineage parent made since the last sync — where to start, how to pick and port each change, and when…
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
tool-installation-conventions
threeal
Approved install commands for CLI tools per platform, and how to install one mid-task without blocking it.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
vitest-conventions
threeal
Conventions for structuring and configuring Vitest test files — concurrency, describe grouping, and the options form for describe/test.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
writing-claude-md-and-skills
threeal
What belongs in a CLAUDE.md versus a skill, how to write both effectively for Claude as the reader, and how to scope a skill — for home (`~/.claude`) or any…
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
github-release-conventions
threeal
Conventions for GitHub releases — whether a change warrants one, the linked Announcements discussion, title, tag, and release notes format.
SkillAFreshness: A★ 1Claude Code +9 - 0.582score
ordering-conventions
threeal
How to choose where an entry goes when its order doesn't affect behavior — list items, config keys and entries, action inputs, paths, and similar.
SkillAFreshness: A★ 1Claude Code +9 - 0.579score
nodejs-conventions
threeal
Conventions for Node.js source code, such as choosing between sync and async APIs.
SkillAFreshness: A★ 1Claude Code +9 - 0.579score
dependency-conventions
threeal
Conventions for choosing the version of a dependency or tool, in any ecosystem.
SkillAFreshness: A★ 1Claude Code +9 - 0.576score
git-tag-conventions
threeal
Signing for git tags.
SkillAFreshness: A★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Sep 24, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/threeal/.claude
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from threeal
- 0.587score
github-writing-conventions
threeal
Conventions for GitHub-facing text — issue and PR narration, screenshots, title casing, cross-repo references, repo descriptions, and repo topics.
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
repo-lineage-sync
threeal
Process for catching a threeal repo up with changes its lineage parent made since the last sync — where to start, how to pick and port each change, and when…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
lefthook-conventions
threeal
Lefthook (lefthook.dev) git hook manager configuration — hook-level and job-level options, what piped/parallel/fail_on_changes actually do, and this repo's…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
repo-lineage-uniformity
threeal
Keep shared config, docs, and structure uniform across the hierarchy of related threeal repos derived from one another.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
tool-installation-conventions
threeal
Approved install commands for CLI tools per platform, and how to install one mid-task without blocking it.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
vitest-conventions
threeal
Conventions for structuring and configuring Vitest test files — concurrency, describe grouping, and the options form for describe/test.
SkillAFreshness: A★ 1Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get github-actions-facts running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
github-actions-facts skill. Agent Mart. https://agentmart.dev/skills/threeal-github-actions-facts (last updated 2026-10-24)