Skip to main content

Recipe: CI/CD Skill Validation

Audit and sync skills automatically in your CI pipeline.

Scenario​

You have a team skill repository and want to ensure every PR:

  • Passes security audit (no prompt injection, credential theft, etc.)
  • Validates SKILL.md format
  • Syncs without errors

Solution​

GitHub Actions​

Create .github/workflows/skill-validation.yml:

name: Skill Validation
on:
  pull_request:
    paths:
      - 'skills/**'

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install skillshare
        run: curl -fsSL https://raw.githubusercontent.com/runkids/skillshare/main/install.sh | sh

      - name: Initialize
        run: skillshare init

      - name: Install skills from this repo
        run: skillshare install . --into ci-check

      - name: Security audit
        run: skillshare audit --json

      - name: Dry-run sync
        run: skillshare sync --dry-run

GitLab CI​

Create .gitlab-ci.yml:

skill-validation:
  image: ghcr.io/runkids/skillshare-ci:latest
  stage: test
  script:
    - skillshare init
    - skillshare install . --into ci-check
    - skillshare audit --json
    - skillshare sync --dry-run
  rules:
    - changes:
        - skills/**/*

Using the CI Docker Image​

For faster pipeline startup, use the pre-built CI image:

# GitHub Actions
jobs:
  validate:
    runs-on: ubuntu-latest
    container:
      image: ghcr.io/runkids/skillshare-ci:latest
    steps:
      - uses: actions/checkout@v4
      - run: skillshare init && skillshare audit --json

Verification​

  • PR check passes: audit exits 0 (no CRITICAL findings)
  • Audit JSON output can be parsed by downstream tools
  • Sync dry-run shows expected symlink operations

Variations​

  • Block on HIGH severity: Add --threshold HIGH (or -T HIGH) to audit — any HIGH+ finding exits non-zero
  • Parallel validation: Run audit and sync in separate CI jobs for faster feedback
  • Scheduled audits: Run nightly to catch newly detected patterns in existing skills