Skill comparison
Compare agent skills before installing.
Comparing 1 skill
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
harden-github-actions is the strongest overall pick here because it has a 57/100 readiness score and fits GitHub automation.
Strongest overall
harden-github-actions
Do a manual repository review before adding this to an agent workflow.
Fastest prototype
harden-github-actions
Best first install candidate based on install readiness and adoption.
Freshest repo
harden-github-actions
Most recent maintenance signal among this shortlist.
| Signal | harden-github-actions Harden GitHub Actions CI/CD workflows for supply-chain security — SHA-pin actions, least-privilege token permissions, verified toolchain installs, OpenSSF Scorecard, and SLSA provenance. Use when adding or auditing GitHub Actions workflows, before making a repository public, when a supply-chain review flags CI gaps, or when standardizing CI hardening across GitHub projects. GitHub-specific by design — GitLab CI and Forgejo Actions are out of scope. |
|---|---|
| Quality | 58/100 Promising |
| Decision verdict | 57/100 Needs manual review Do a manual repository review before adding this to an agent workflow. |
| Adoption | 14 stars Verified outcomes are shown on each skill page |
| Freshness | Aug 21, 2026 |
| Use-case fit | |
| Workflow fit | |
| Platform hints | Claude Code |
| Warnings | Low GitHub adoption signal · No OpenAgentSkill engagement data yet |
| Best for | GitHub automation workflows · Claude Code teams · builders willing to evaluate younger projects |
| Not ideal for | teams that need a vendor-supported SLA · production agents without a repository review |
| OpenAgentSkill engagement | 0 views 0 install copies |
| Install | $ npx skills add jrjsmrtn/project-orchestration-skills --skill harden-github-actions |