No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by anthropics · Claude Skill · ★ 8.9k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is claude-code-action safe to install? View the security audit →
Claude Code Action A general-purpose Claude Code action for GitHub PRs and issues that can answer questions and implement code changes. This action intelligently detects when to activate based on your workflow context—whether responding to @claude mentions, issue assignments, or executing automation tasks with explicit prompts. It supports multiple authentication methods including Anthropic direct API (API key or workload identity federation), Amazon Bedrock, Google Vertex AI, and Microsoft Foundry. Features 🎯 Intelligent Mode Detection: Automatically selects the appropriate execution mode based on your workflow context—no configuration needed 🤖 Interactive Code Assistant: Claude can answer questions about code, architecture, and programming 🔍 Code Review: Analyzes PR changes and suggests improvements ✨ Code Implementation: Can implement simple fixes, refactoring, and even new features 💬 PR/Issue Integration: Works seamlessly with GitHub comments and PR reviews 🛠️ Flexible Tool Access: Access to GitHub APIs and file operations (additional tools can be enabled via configuration) 📋 Progress Tracking: Visual progress indicators with checkboxes that dynamically update as Claude...
| Stars | 8,910 |
| Forks | 2,151 |
| Language | TypeScript |
| Category | Claude Skill |
| License | MIT |
| Quality Score | 47.9983429362411/100 |
| Open Issues | 796 |
| Last Updated | 2026-09-19 |
| Created | 2025-05-19 |
| Platforms | claude-code, node |
| Est. Tokens | ~15k |
These tools work well together with claude-code-action for enhanced workflows:
Looking for a claude-code-action alternative? If you're comparing claude-code-action with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
A curated collection of 1000+ agent skills from official dev teams and the community, compatible with Claude C
Create beautiful slides on the web using a coding agent's frontend skills
Persistent file-based planning for AI coding agents and long-running tasks. Crash-proof markdown plans, sessio
A set of ready to use Agent Skills for research, science, engineering, analysis, finance and writing.
Universal SEO skill for Claude Code. 25 sub-skills + 18 sub-agents covering technical SEO, E-E-A-T, schema, GE
A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows — particular
Explore other popular claude skill tools:
claude-code-action is an open-source claude skill by anthropics with 8.9k GitHub stars.
claude-code-action is primarily written in TypeScript.
You can find installation instructions and usage details in the claude-code-action GitHub repository at github.com/anthropics/claude-code-action. The project has 8.9k stars and 2151 forks, indicating an active community.
claude-code-action is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to claude-code-action on Agent Skills Hub include awesome-agent-skills, frontend-slides, planning-with-files. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: