Skill comparison
Compare agent skills before installing.
Comparing 1 skill
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
harden-gitlab-ci is the strongest overall pick here because it has a 57/100 readiness score and fits GitHub automation.
Strongest overall
harden-gitlab-ci
Do a manual repository review before adding this to an agent workflow.
Fastest prototype
harden-gitlab-ci
Best first install candidate based on install readiness and adoption.
Freshest repo
harden-gitlab-ci
Most recent maintenance signal among this shortlist.
| Signal | harden-gitlab-ci Harden GitLab CI/CD pipelines for supply-chain security — SHA-pin `include:` and CI/CD components, scope the `CI_JOB_TOKEN` allowlist, protect and mask variables, pin job image digests, and use `id_tokens`/OIDC instead of long-lived secrets. Use when adding or auditing a `.gitlab-ci.yml`, before making a GitLab project public, when a supply-chain review flags CI gaps, or when standardizing pipeline hardening across GitLab projects (gitlab.com or self-hosted). GitLab-specific by design — for GitHub Actions use `harden-github-actions`; Forgejo/Gitea Actions are out of scope. |
|---|---|
| Quality | 58/100 Promising |
| Decision verdict | 57/100 Needs manual review Do a manual repository review before adding this to an agent workflow. |
| Adoption | 14 stars Verified outcomes are shown on each skill page |
| Freshness | Aug 21, 2026 |
| Use-case fit | |
| Workflow fit | |
| Platform hints | Claude Code |
| Warnings | Low GitHub adoption signal · No OpenAgentSkill engagement data yet |
| Best for | GitHub automation workflows · Claude Code teams · builders willing to evaluate younger projects |
| Not ideal for | teams that need a vendor-supported SLA · production agents without a repository review |
| OpenAgentSkill engagement | 0 views 0 install copies |
| Install | $ npx skills add jrjsmrtn/project-orchestration-skills --skill harden-gitlab-ci |