/configure:reusable-workflows

Install Claude-powered reusable GitHub Actions workflows from claude-plugins into a project.

When to Use This Skill

Use this skill when...

Use another approach when...

Adding Claude-powered reusable workflows for security, quality, or accessibility

Setting up standard CI/CD workflows (use

/configure:workflows

)

Installing pre-built workflow callers from claude-plugins

Writing custom GitHub Actions workflows from scratch

Automating OWASP, secret scanning, or code smell detection via CI

Configuring local security scanning tools (use

/configure:security

)

Adding WCAG accessibility checks to pull request pipelines

Running one-off accessibility audits manually

Bootstrapping a full suite of Claude-powered CI checks across categories

Only need to check existing workflow compliance

Context

Workflows dir: !

find . -maxdepth 1 -type d -name \'.github/workflows\'

Existing callers: !

find .github/workflows -maxdepth 1 -name 'claude-*'

Package files: !

find . -maxdepth 1 ( -name 'package.json' -o -name 'pyproject.toml' -o -name 'Cargo.toml' -o -name 'go.mod' ) -print -quit

TypeScript files: !

find . -maxdepth 2 ( -name '.ts' -o -name '.tsx' ) -print -quit

Component files: !

find . -maxdepth 3 ( -name '.jsx' -o -name '.vue' -o -name '*.svelte' ) -print -quit

Parameters

Parse from command arguments:

--all

Install all workflows

--security

Install security workflows only

--quality

Install quality workflows only

--a11y

Install accessibility workflows only

--list

List available workflows without installing Available Workflows Security Workflow Description File secrets Detect leaked secrets and credentials reusable-security-secrets.yml owasp OWASP Top 10 vulnerability scanning reusable-security-owasp.yml deps Dependency vulnerability audit reusable-security-deps.yml Quality Workflow Description File typescript TypeScript strictness analysis reusable-quality-typescript.yml code-smell Code smell detection reusable-quality-code-smell.yml async Async/await pattern issues reusable-quality-async.yml Accessibility Workflow Description File wcag WCAG 2.1 compliance checking reusable-a11y-wcag.yml aria ARIA pattern validation reusable-a11y-aria.yml Execution Execute this reusable workflow installation: Step 1: Detect current state Check for .github/workflows/ directory (create if missing) List any existing Claude-powered workflow callers Determine project type from files present Step 2: Select workflows If no flags provided, ask the user which categories to install: Available workflow categories: [1] Security (secrets, owasp, deps) [2] Quality (typescript, code-smell, async) [3] Accessibility (wcag, aria) [4] All workflows Which categories? (comma-separated, e.g., 1,2): If --list is set, print the Available Workflows tables above and stop. Step 3: Generate caller workflows For each selected workflow, create a caller file in .github/workflows/ . Naming convention : claude--.yml Example: claude-security-secrets.yml Use the caller workflow template: name : Claude <Category

- <Name

on : pull_request : branches : [ main ] workflow_dispatch : permissions : contents : read pull-requests : write id-token : write jobs : check : uses : laurigates/claude - plugins/.github/workflows/reusable - <category

- <name

.yml@main with :

Default inputs - customize as needed

max-turns

:

5

secrets

:

inherit

For complete caller workflow files per category, see

REFERENCE.md

.

Step 4: Remind about secrets

After installation, print the required secret configuration:

Required secret: CLAUDE_CODE_OAUTH_TOKEN

To configure:

1. Go to repository Settings > Secrets and variables > Actions

2. Add secret: CLAUDE_CODE_OAUTH_TOKEN

3. Value: Your Claude Code OAuth token

Get token from: https://console.anthropic.com/

Customization

After installation, users can customize:

Input

Purpose

Example

file-patterns

Files to scan

'src/*/.ts'

max-turns

Claude analysis depth

3

(quick) to

10

(thorough)

fail-on-*

Block merges on findings

true

/

false

wcag-level

Accessibility standard

'A'

,

'AA'

,

'AAA'

Post-Installation

Configure secret

Add

CLAUDE_CODE_OAUTH_TOKEN

to repository secrets

Customize patterns

Edit

file-patterns

to match project structure

Adjust triggers

Modify

paths

filters for relevant file types

Test manually

Use workflow_dispatch to test before PR triggers Agentic Optimizations Context Command List available workflows /configure:reusable-workflows --list Install all workflows at once /configure:reusable-workflows --all Security workflows only /configure:reusable-workflows --security Quality workflows only /configure:reusable-workflows --quality Accessibility workflows only /configure:reusable-workflows --a11y Check existing callers find .github/workflows -name 'claude-*' -type f Flags Flag Description --all Install all workflows --security Install security workflows only --quality Install quality workflows only --a11y Install accessibility workflows only --list List available workflows without installing See Also /configure:workflows - Standard CI/CD workflows (container, release-please) /configure:security - Security tooling configuration ci-workflows skill - Workflow patterns