ci-validate

$npx mdskill add hrconsultnj/claude-plugins/ci-validate

Validates CI/CD workflow files for syntax errors, common mistakes, and best practice violations using actionlint and heuristic checks.

  • Helps developers ensure their CI/CD workflows are error-free and follow best practices.
  • Integrates with actionlint for GitHub Actions and includes built-in heuristic checks.
  • Uses external linters and custom heuristics to identify issues and provide fix suggestions.
  • Reports results through structured outputs, including detailed issue descriptions and actionable tasks.

SKILL.md

.github/skills/ci-validateView on GitHub ↗
---
name: ci-validate
description: Validate CI/CD workflow files. Runs actionlint for GitHub Actions, checks for common mistakes, and reports issues with fix suggestions.
argument-hint: "[workflow-file]"
---

Validate CI/CD workflow files for syntax errors, common mistakes, and best practice violations. Combines external linters (actionlint) with built-in heuristic checks that catch issues linters miss.

## Content Loading

Load each step through the fetch command (handles caching, decryption, and auth):

```bash
"~/.composure/bin/composure-fetch.mjs" skill shipyard ci-validate {step-filename}
```

**Do NOT read cache files directly** — they are encrypted at rest. Always use the fetch command above.

## Steps

| # | File | 
|---|------|
| 1 | `01-find-ci-files.md` |
| 2 | `02-external-linter.md` |
| 3 | `03a-heuristic-checks-1-6.md` |
| 4 | `03b-heuristic-checks-7-12.md` |
| 5 | `04-report-and-tasks.md` |

More from hrconsultnj/claude-plugins

SkillDescription
app-architectureComplete architecture guide for building features from database to UI. Routes to frontend/, fullstack/, mobile/, backend/, or sdks/ based on detected stack. Covers decomposition, multi-tenant isolation, auth model, query patterns, and component patterns.
audit-depsFocused dependency CVE audit — reports vulnerabilities with version info and safe upgrade commands.
backlogManage the tasks-plans/ workspace — add items to backlog, ideas, or reference. Process queued work. Organize by topic, not flat dumps.
build-graphBuild or update the code review knowledge graph, generate the visualization, and open it. Run this first to initialize, or let hooks keep it updated automatically.
calibrateCalibrate test bench — detect test framework, read existing test conventions, generate .claude/testbench.json config. Query Context7 for test framework reference docs. Run once per project.
ci-generateGenerate CI/CD workflow from detected stack. GitHub Actions, GitLab CI, or Bitbucket Pipelines. Includes lint, typecheck, test, build, and deploy stages.
code-organizerRestructure a messy project into conventional file layout based on detected framework. Analyzes, plans, executes with import updates, and verifies.
deps-checkCheck dependency health -- known CVEs, outdated packages, unsafe versions. Recommends the highest safe version, not just "latest". Blocks Critical CVEs via Composure commit gate.
design-forgeThis skill should be used when the user asks to "add premium animations", "create a canvas visualization", "build a glassmorphism panel", "add a custom cursor", "create a generative background", "build an interactive card", "add scroll progress", "add sound design", "create a Three.js hero", "build a creative portfolio", "add particle effects", "add scanlines", "add a typewriter effect", "design a landing page", "implement advanced animations", "add 3D elements", "design using Next.js Conf patterns", "create interactive experience", "add Framer Motion animations", "add GSAP scroll animations", "integrate Spline 3D", or needs guidance on premium web design patterns, creative coding, generative art, micro-interactions, accessibility for animations, or bespoke interactive experiences beyond standard UI components.
dockerfileGenerate or validate Dockerfiles with security best practices. Multi-stage builds, non-root user, layer caching, .dockerignore.