← Back to Skills Marketplace
daniellummis

GitHub Actions Branch Drift Audit

by Daniel Lummis · GitHub ↗ · v1.0.0
cross-platform ✓ Security Clean
256
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install github-actions-branch-drift-audit
Description
Detect branch-level GitHub Actions reliability drift by comparing failure and runtime deltas against a mainline baseline.
README (SKILL.md)

GitHub Actions Branch Drift Audit

Use this skill to catch branch-specific CI reliability regressions before they spread into your mainline release flow.

What this skill does

  • Reads GitHub Actions run JSON exports
  • Groups runs by repository + workflow + branch
  • Selects a baseline branch per repository/workflow (defaults to main|master)
  • Compares each non-baseline branch against that baseline on:
    • failure-rate drift (percentage points)
    • average runtime drift (ratio)
  • Flags warning/critical drift severity and supports CI fail gates
  • Emits text or JSON output for pipeline checks and triage dashboards

Inputs

Optional:

  • RUN_GLOB (default: artifacts/github-actions/*.json)
  • TOP_N (default: 20)
  • OUTPUT_FORMAT (text or json, default: text)
  • MIN_RUNS_PER_BRANCH (default: 2)
  • MIN_BRANCHES (default: 2)
  • BASELINE_BRANCH_MATCH (default: ^(main|master)$)
  • WORKFLOW_MATCH (regex, optional)
  • WORKFLOW_EXCLUDE (regex, optional)
  • REPO_MATCH (regex, optional)
  • REPO_EXCLUDE (regex, optional)
  • FAILURE_DRIFT_WARN_PP (default: 10)
  • FAILURE_DRIFT_CRITICAL_PP (default: 25)
  • RUNTIME_DRIFT_WARN_RATIO (default: 1.25)
  • RUNTIME_DRIFT_CRITICAL_RATIO (default: 1.6)
  • FAIL_ON_CRITICAL (0 or 1, default: 0)

Collect run JSON

gh run view \x3Crun-id> --json databaseId,workflowName,event,conclusion,headBranch,headSha,createdAt,updatedAt,startedAt,url,repository \
  > artifacts/github-actions/run-\x3Crun-id>.json

Run

Text report:

RUN_GLOB='artifacts/github-actions/*.json' \
BASELINE_BRANCH_MATCH='^(main|release/.*)$' \
MIN_RUNS_PER_BRANCH=3 \
bash skills/github-actions-branch-drift-audit/scripts/branch-drift-audit.sh

JSON output with fail gate:

RUN_GLOB='artifacts/github-actions/*.json' \
OUTPUT_FORMAT=json \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-branch-drift-audit/scripts/branch-drift-audit.sh

Run with bundled fixtures:

RUN_GLOB='skills/github-actions-branch-drift-audit/fixtures/*.json' \
bash skills/github-actions-branch-drift-audit/scripts/branch-drift-audit.sh

Output contract

  • Exit 0 in report mode (default)
  • Exit 1 when FAIL_ON_CRITICAL=1 and one or more drift rows are critical
  • Text mode prints summary + ranked branch drift rows
  • JSON mode prints summary + drift rows + critical-only slice
Usage Guidance
This skill appears coherent and local: it reads GitHub Actions run JSON files and produces reports; it does not request secrets or phone home. Before installing or running: (1) note that SKILL.md shows using the GitHub CLI ('gh') to export runs — ensure you have 'gh' installed and authenticated if you plan to collect live run JSONs; the skill's metadata only lists bash and python3, so update metadata or ensure gh is present. (2) Confirm the RUN_GLOB path points only at intended artifacts (avoid matching any sensitive files). (3) Review/approve use of FAIL_ON_CRITICAL in CI (it causes nonzero exit). (4) If you need broader assurance, inspect the full, untruncated script to confirm no hidden behavior. Overall this skill is internally consistent and low-risk for the described offline audit use case.
Capability Analysis
Type: OpenClaw Skill Name: github-actions-branch-drift-audit Version: 1.0.0 The skill is a utility for auditing GitHub Actions performance by comparing branch runtimes and failure rates against a baseline. It processes local JSON files using a Python script embedded in a Bash wrapper (scripts/branch-drift-audit.sh). The logic is transparent, focuses on statistical analysis of CI run data, and lacks any indicators of data exfiltration, persistence, or malicious execution.
Capability Assessment
Purpose & Capability
The skill's name/description match what the code does: it reads GitHub Actions run JSONs, aggregates by repo/workflow/branch, and reports drift. One minor mismatch: SKILL.md demonstrates collecting run JSON using the GitHub CLI (gh run view ...), but the declared required binaries list only bash and python3 — 'gh' is not listed even though it's used in the documented collection step. This is a documentation/metadata omission, not an indication of malicious behavior.
Instruction Scope
SKILL.md and the script limit activity to reading local JSON files (RUN_GLOB), parsing fields, computing stats, and printing text/JSON reports. The instructions do not ask the agent to read arbitrary system files, access unrelated environment variables, or send data to external endpoints. The only external interaction shown is the suggested use of the 'gh' CLI to produce the input files.
Install Mechanism
This is an instruction-only skill with a single shell script; there is no install spec, no downloads, and no archives extracted. No install-related risk was detected.
Credentials
The skill declares no required environment variables or credentials, which is proportionate to its stated offline analysis purpose. Practical note: using the documented 'gh run view' command requires the GitHub CLI and appropriate GH authentication (token/session) if run, but the skill itself does not request or store credentials. The absence of 'gh' in required binaries and no mention of needing GH auth should be corrected in metadata/documentation.
Persistence & Privilege
The skill does not request persistent presence (always: false) nor attempts to modify other skills or system-wide settings. It runs as a local script and exits; nothing indicates escalation of privilege or background persistence.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install github-actions-branch-drift-audit
  3. After installation, invoke the skill by name or use /github-actions-branch-drift-audit
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of github-actions-branch-drift-audit. - Detects branch-level CI reliability drift by comparing failure rates and runtime metrics against a mainline baseline. - Supports flexible configuration for branch selection, workflow/repo filtering, and drift thresholds. - Emits both text and JSON reports for pipeline integration and dashboard triage. - Provides fail gate capability to enforce quality, exiting nonzero on critical drift if enabled. - Easy integration: analyze GitHub Actions run exports with simple Bash or Python dependencies.
Metadata
Slug github-actions-branch-drift-audit
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is GitHub Actions Branch Drift Audit?

Detect branch-level GitHub Actions reliability drift by comparing failure and runtime deltas against a mainline baseline. It is an AI Agent Skill for Claude Code / OpenClaw, with 256 downloads so far.

How do I install GitHub Actions Branch Drift Audit?

Run "/install github-actions-branch-drift-audit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is GitHub Actions Branch Drift Audit free?

Yes, GitHub Actions Branch Drift Audit is completely free (open-source). You can download, install and use it at no cost.

Which platforms does GitHub Actions Branch Drift Audit support?

GitHub Actions Branch Drift Audit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created GitHub Actions Branch Drift Audit?

It is built and maintained by Daniel Lummis (@daniellummis); the current version is v1.0.0.

💬 Comments