CI/CD and Automation skill for Claude Code: set up quality gates and safe deploys

Makes your agent set up CI quality gates, GitHub Actions workflows and a rollback path for deployments.

Installs: 62.5K; on skills.sh
Stars: 112.6K; on GitHub
Updated: Nov 2026; last repo commit

ci-cd-and-automation makes the agent build an automated pipeline where every change passes lint, type check, unit tests, build, integration tests, optional end-to-end tests, a security audit and a bundle size check before merge. It loads when you set up or change build and deployment pipelines, configure test runners in CI or pick a deployment strategy.

It gives GitHub Actions examples, a loop for feeding CI failures back to the agent, preview deployments, feature flags, staged rollouts and a manual rollback workflow. It also covers Dependabot or Renovate, PR checks and ways to get a slow pipeline under 10 minutes. It bundles no scripts.

Good for

Developers setting up CI on a new project
Teams adding quality gates or deployment strategies
Anyone whose CI keeps failing and wants an agent to fix it

Install ci-cd-and-automation

Claude Code

Copy this prompt.

Install the ci-cd-and-automation skill in Claude Code. Run this command:

npx skills add https://github.com/addyosmani/agent-skills --skill ci-cd-and-automation

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

From its listing on skills.sh. Source.

What's in the skill

When it loads

Automates CI/CD pipeline setup. Use when setting up or modifying build and deployment pipelines. Use when you need to automate quality gates, configure test runners in CI, or establish deployment strategies.

Sections in SKILL.md

Overview
When to Use
The Quality Gate Pipeline
GitHub Actions Configuration
Basic CI Pipeline
With Database Integration Tests
E2E Tests
Feeding CI Failures Back to Agents
Deployment Strategies
Preview Deployments
Feature Flags
Staged Rollouts
Rollback Plan
Environment Management
Automation Beyond CI
Dependabot / Renovate

Key facts

Author: addyosmani (repo owner)
Installs on skills.sh: 62,507 (Nov 2, 2026)
GitHub stars: 112,555 on the agent-skills repo (Nov 2, 2026)
License: MIT
Last commit: 2026-11-01
What installs: 1 file: SKILL.md
Needs: A repository and CI host; the examples use GitHub Actions with npm
Works in: Claude Code, Codex, Cursor, Gemini CLI, Copilot, OpenCode and more, per the README

What it includes

Lint, types, unit tests, build, integration, optional E2E, audit, bundle size
No gate can be skipped: fix lint instead of disabling a rule.
Quality gate pipeline
A GitHub Actions workflow that runs the gates on pull requests and pushes
YAML example.
Write · Basic CI pipeline
A workflow with a test database and secrets from GitHub Secrets
Says to use secrets even for CI-only databases.
Write · Database integration tests
A workflow for end-to-end tests
YAML example.
Write · E2E tests
Paste the failure, fix, verify locally, push again
Lint failures get auto-fix, type errors get fixed at the location, test failures follow the debugging skill.
Runs code · Feed CI failures to the agent
Every pull request gets a preview deployment
YAML example.
Write · Preview deployments
Deploy behind flags; canary at 1%, 10%, 100%; remove the flag later
Set a cleanup date when you create a flag.
Feature flags
Staging first, then production, then a 15-minute monitoring window
Roll back if errors are detected.
Staged rollout
A manual rollback workflow that takes a version input
Example runs npx vercel rollback with the version passed through env.
Write · Rollback plan
CI never gets production secrets; use separate test secrets
Keeps credentials out of code and CI config files.
Environment management
Automated dependency updates
YAML example.
Write · Dependabot and Renovate
Someone owns a green build; required reviews, status checks and branch protection
No force-pushes to main.
Build Cop and PR checks
Caching and parallelism when the pipeline passes 10 minutes
YAML example.
CI optimization

From the official docs

Permissions

Medium risk

It writes CI and deploy workflows that can run on every push and ship to real environments. Read each workflow and its secrets before you merge it.

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

It writes workflows that run on every push and deploy
The examples build, test, preview-deploy and roll back. Read each workflow, its triggers and its secrets before you merge it.
Rollback and deploy steps call hosting tools
The rollback example runs npx vercel rollback with a version input. Check the commands match your host.
It touches secrets settings
The skill says to use GitHub Secrets and keep production secrets out of CI. Check that nothing sensitive lands in a file.

Technical details

Talks to	your CI host. your deploy host

Questions

What does ci-cd-and-automation do?

It makes Claude set up automated quality gates and deployment pipelines, mostly with GitHub Actions examples, and keep them green by feeding CI failures back into the fix loop.

How do I install ci-cd-and-automation?

Use the install box above. The README also lists npx skills add addyosmani/agent-skills --skill ci-cd-and-automation for one skill, and a Claude Code plugin for the whole pack (/plugin marketplace add addyosmani/agent-skills, then /plugin install agent-skills@addy-agent-skills). A one-skill install copies only skills/ci-cd-and-automation/ and not the repo-level references folder; the README says the skill still works.

Does it only work with GitHub Actions?

The examples use GitHub Actions, npm and tools like Playwright and Vercel. The gate ideas apply elsewhere, but you need to tell Claude your CI host and test commands.

Will it deploy to production?

It writes preview, staging, production and rollback workflows as examples. Whether they run depends on the CI host and your secrets, so review any deploy workflow before you merge it.

Does it handle secrets?

It says to use GitHub Secrets for credentials, even for CI test databases, and that CI should never have production secrets.

Is it safe to run?

It is a text file of instructions and bundles no scripts. It leads the agent to write workflow files that can run on every push and deploy, so review them before merging.

Does it work in Codex, Cursor or other tools?

The README documents Codex (codex plugin marketplace add addyosmani/agent-skills, then codex plugin add agent-skills@agent-skills, Codex CLI v0.122 or newer), Cursor (copy skills into .cursor/skills/), Gemini CLI, Windsurf, OpenCode, GitHub Copilot, Kiro and others. It says the skills are plain Markdown that work with any agent that accepts instruction files. It does not mention the Claude app.

Information

updated Nov 2, 2026

Repository: addyosmani/agent-skills
Folder: skills/ci-cd-and-automation

addyosmani/agent-skills skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 2

ci-cd-and-automation SKILL.md · github.com
addyosmani/agent-skills README · github.com