Audit manual GitHub Actions trigger dependence by workflow/event to flag automation gaps and intervention risk.

Audit GitHub merge queue workflow health with failure-rate, queue-latency, and stale-success risk scoring.

Audit GitHub Actions cloud auth workflows for OIDC hardening gaps like missing id-token write permissions, static cloud secrets, and floating auth action refs.

Audit GitHub Actions workflow permission scope drift to enforce least-privilege token access.

Audit pull-request and merge-queue GitHub Actions reliability by scoring failure rate, queue latency, and stale-success risk for merge gates.

Audit GitHub Actions queue wait hotspots from run/job JSON so CI bottlenecks are visible before they stall merges.

Measure GitHub Actions failure recovery latency and unresolved incident age by workflow group.

Audit GitHub Actions rerun dependency and success-after-rerun effectiveness to highlight workflows wasting CI time.

Quantify wasted GitHub Actions minutes caused by reruns so flaky workflows can be fixed with data.

Audit GitHub Actions runs for fail-then-success retry recovery patterns to quantify flaky rerun waste.

Detect GitHub Actions workflow groups that stopped running on their normal cadence using median run intervals and current inactivity gap.

Compare baseline vs current GitHub Actions run exports to catch workflow/job runtime regressions before CI costs and lead time spike.

Audit GitHub Actions workflow files for secret exposure risks like pull_request_target secret usage, secret echo commands, and unpinned action secret passing.

Audit GitHub Actions workflows that use self-hosted runners for untrusted trigger and credential-hardening risks.

Audit rerun debt by commit SHA to find commits that repeatedly burn CI minutes across workflows.

Detect flaky GitHub Actions job steps by finding mixed success/failure conclusions across runs.

Detect stale queued/in-progress GitHub Actions runs before they quietly block delivery.

Audit GitHub Actions job runtime risk against timeout thresholds so near-timeout jobs get fixed before they fail CI.

Audit GitHub Actions run health by trigger event and workflow so flaky or noisy automation sources are easy to prioritize.

Audit GitHub Actions workflow files for hardening gaps (missing timeouts/permissions/concurrency and floating action refs).

输入项目想法或 GitHub 链接，自动搜索相关开源项目，生成结构化分析报告（技术栈/优缺点/评分）， 并可下载评分最高的前3名代码包。支持意图搜索和直链分析两种模式。

Manage a single GitHub repository via chat for non-technical requesters—after they share the repo URL and a temporary personal token, pull status, summarize who did what and when, and create/follow up on issues directly through the GitHub API.

Local GitHub repository helper for search, clone, sync, and issue/PR inspection workflows. Use when users mention github/repo/repository, ask to download or track repositories, or need structured local knowledge at /Users/liuchen/Documents/github with gh CLI and GitHub MCP integration.

Autonomous GitHub Issue Resolver Agent with guardrails. Use when the user wants to discover, analyze, and fix open issues in GitHub repositories. Triggers on requests like "fix GitHub issues", "resolve issues in repo", "work on GitHub bugs", or when the user provides a GitHub repository URL and asks for issue resolution. Supports the full workflow from issue discovery to PR submission with safety guardrails preventing scope creep, unauthorized access, and dangerous operations.