Official agent skill

Workflow Fix

by bitwarden in bitwarden/ai-plugins

Apply fixes for workflow linter findings identified by the workflow-audit skill.

OfficialCustom licenceAuto-check passedDevelopment

Install Workflow Fix

skills CLI
$ npx skills add bitwarden/ai-plugins --skill workflow-fix -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install bitwarden/ai-plugins workflow-fix --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/bitwarden/ai-plugins.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/bitwarden-devops-engineer/skills/workflow-fix .claude/skills/workflow-fix && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
workflow-fix
GitHub stars
154
Token cost
~1.1k tokens
SKILL.md length
455 words
Files
1
Skills in repo
33
Repo updated
First seen
Licence
Custom licence

At a glance

Apply fixes for workflow linter findings identified by the workflow-audit skill.

  • Works in 8 steps: Verify Prerequisites → Determine Scope → For Each Repo in Scope → …
  • Tasks that involve Linting and formatting
  • SKILL.md covers Rules, Step 1: Verify Prerequisites, Step 2: Determine Scope and Step 3: For Each Repo in Scope, plus 5 more sections
  • Calls git and gh

What it does

Workflow Fix is an agent skill from bitwarden/ai-plugins, published by the product's own GitHub organization. Apply fixes for workflow linter findings identified by the workflow-audit skill. Applies mechanical fixes automatically, pauses for judgment calls, verifies with a re-lint, and creates draft PRs. Run the workflow-audit skill first to identify findings before using this skill. <example User: Go ahead and fix the linter findings from the audit Action: Trigger workflow-fix to apply fixes and create PRs </example <example User: Fix the workflow linter issues in server and clients Action: Trigger workflow-fix for…

Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Development, covering Linting and formatting. The repository describes itself as: AI plugin marketplace.

When your agent uses it

  • Tasks that involve Linting and formatting

Example prompts

  • “/workflow-fix”

Requirements

  • Pre-approved tools (allowed-tools): Read, Edit, Glob, Grep, Skill, Bash(bwwl:*), Bash(gh api --method GET *), Bash(git checkout:*), Bash(git diff:*), Bash(git status:*), Bash(gh pr create:*)

Workflow steps

8 steps, taken from the step headings in SKILL.md.

  1. Verify Prerequisites
  2. Determine Scope
  3. For Each Repo in Scope
  4. Create a Fix Branch
  5. Apply Fixes
  6. Verify Fixes
  7. Review and Create PR
  8. Summary

What it can do on your machine

Read from SKILL.md and the folder at commit 0047fdf. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Edit
    • Glob
    • Grep
    • Skill
    • Bash(bwwl:*)
    • Bash(gh api --method
    • GET *)
    • Bash(git checkout:*)
    • Bash(git diff:*)

    …and 2 more on the same allowed-tools line.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • git
    • gh

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use git and gh, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Workflow Fix loads about 1.1k tokens when it runs. Until then it costs about 138 tokens; SKILL.md has 455 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~138
When it runs · the whole SKILL.md, loaded when a task matches
~1.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 455 words (~1,059 tokens).

name
workflow-fix
allowed-tools
Read, Edit, Glob, Grep, Skill, Bash(bwwl:*), Bash(gh api --method GET *), Bash(git checkout:*), Bash(git diff:*), Bash(git status:*), Bash(gh pr create:*)

Read the full SKILL.md on GitHub

Files

Just SKILL.md in plugins/bitwarden-devops-engineer/skills/workflow-fix of bitwarden/ai-plugins.

Open the folder on GitHubat commit 0047fdf

Compare with similar skills

Workflow Fix next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Workflow Fix compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Workflow Fix this skillbitwarden/ai-plugins154—~1.1kAutomated safety check: PassCustom licence
Install Anti-Slop Oxlint Rulesdmmulroy/anti-slop5.2k—~2.2kAutomated safety check: PassMIT
Babysit PR To Pass CIsgl-project/sglang37k2 repos~3kAutomated safety check: PassApache-2.0
Rust Best Practicesfarm-fe/farm5.6k3 repos~1.1kAutomated safety check: PassMIT
Go Pedantrychromedp/chromedp13k—~3.7kAutomated safety check: PassMIT
Kedro Babysitkedro-org/kedro11k—~4kAutomated safety check: PassCustom licence

Similar skills

  • Installs, updates or migrates the vendored anti-slop Oxlint plugin in a repository, keeping local rule changes and the plugin's license and provenance files.

    5.2k GitHub stars~2.2k tokensUpdated 27 days ago
    DevelopmentAuto-check passed
  • Babysit PR To Pass CI

    sgl-project/sglang

    Start and persistently pursue a goal to babysit an SGLang pull request until selected GitHub Actions workflows pass on the latest PR head.

    37k GitHub starsUsed in 2 repos~3k tokens
    DevelopmentAuto-check passed
  • Guide for writing idiomatic Rust code based on Apollo GraphQL's best practices handbook.

    5.6k GitHub starsUsed in 3 repos~1.1k tokens
    DevelopmentAuto-check passed
  • Go Pedantry

    chromedp/chromedp

    This skill should be used when the user is writing Go code and needs guidance on Go-specific pedantry: error wrapping with fmt.Errorf and %w, interface design (accept interfaces return structs)…

    13k GitHub stars~3.7k tokensUpdated yesterday
    DevelopmentAuto-check passed
  • Kedro Babysit

    kedro-org/kedro

    Run Kedro's local lint / format / type-check / tests on changed files (uses the project's pre-commit hooks, ruff, mypy, pytest, lint-imports, detect-secrets, Make targets — in the right venv), or…

    11k GitHub stars~4k tokensUpdated yesterday
    DevelopmentAuto-check passed
  • WooCommerce Markdown Guidelines

    woocommerce/woocommerce

    Rules for writing and editing markdown in the WooCommerce repository, with the project's markdownlint settings for headings, lists and code blocks.

    11k GitHub starsUsed in 1 repo~1.7k tokens
    DevelopmentAuto-check passed

More from bitwarden/ai-plugins

All 33 skills in this repo
  • Reviewing Claude Config

    bitwarden/ai-plugins

    Official

    Reviews Claude configuration files for security, structure, and prompt engineering quality.

    154 GitHub stars~4.2k tokensUpdated today
    Auto-check passed
  • Managing Workflow Secrets

    bitwarden/ai-plugins

    Official

    Bitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions…

    154 GitHub stars~4k tokensUpdated today
    Auto-check passed
  • Official

    This skill should be used when the user asks to "review the security architecture", "check authentication patterns", "evaluate trust boundaries", "review encryption implementation", "assess…

    154 GitHub stars~2.2k tokensUpdated today
    Auto-check passed
  • Official

    Audits an external (third-party) Claude Code plugin pinned in this marketplace for security risk before it is vendored, and writes the report to a file for downstream posting.

    154 GitHub stars~1.8k tokensUpdated today
    Auto-check passed
  • Action Audit

    bitwarden/ai-plugins

    Official

    Audit GitHub Actions action usage across an org. An agent skill from bitwarden/ai-plugins.

    154 GitHub stars~1.5k tokensUpdated today
    Auto-check passed
  • Action Remediate

    bitwarden/ai-plugins

    Official

    Remediate GitHub Actions action findings identified by the action-audit skill.

    154 GitHub stars~1.1k tokensUpdated today
    Auto-check passed

Categories

Questions about Workflow Fix

What does Workflow Fix do?

Apply fixes for workflow linter findings identified by the workflow-audit skill. Workflow Fix is an agent skill from bitwarden/ai-plugins, published by the product's own GitHub organization. Apply fixes for workflow linter findings identified by the workflow-audit skill.

When should I use Workflow Fix?

Workflow Fix fits situations like: tasks that involve Linting and formatting.

How do I install Workflow Fix in Claude Code?

Run `npx skills add bitwarden/ai-plugins --skill workflow-fix -a claude-code`. Or copy the skill folder (plugins/bitwarden-devops-engineer/skills/workflow-fix in bitwarden/ai-plugins) into .claude/skills/workflow-fix in your project. Claude Code loads it when a task matches its description.

How do I install Workflow Fix in Codex?

Run `npx skills add bitwarden/ai-plugins --skill workflow-fix -a codex`. Or copy the skill folder (plugins/bitwarden-devops-engineer/skills/workflow-fix in bitwarden/ai-plugins) into .agents/skills/workflow-fix in your project. Codex loads it when a task matches its description.

Can I use Workflow Fix in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add bitwarden/ai-plugins --skill workflow-fix -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/workflow-fix, .gemini/skills/workflow-fix, .github/skills/workflow-fix and .opencode/skills/workflow-fix in your project.

What does Workflow Fix need to run?

Going by SKILL.md and its folder, Workflow Fix needs the command-line tools its instructions call (git and gh). Its frontmatter pre-approves these tools: Read, Edit, Glob, Grep, Skill, Bash(bwwl:*), Bash(gh api --method GET *), Bash(git checkout:*), Bash(git diff:*), Bash(git status:*), Bash(gh pr create:*).

Does Workflow Fix access the network?

SKILL.md contains no URLs. Its commands use git and gh, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Workflow Fix safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Workflow Fix use?

Workflow Fix has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Workflow Fix use?

About 1.1k tokens (SKILL.md is roughly 4.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Workflow Fix?

Skills that share tags, products or a category with Workflow Fix: Install Anti-Slop Oxlint Rules (dmmulroy/anti-slop, 5.2k stars), Babysit PR To Pass CI (sgl-project/sglang, 37k stars), Rust Best Practices (farm-fe/farm, 5.6k stars) and Go Pedantry (chromedp/chromedp, 13k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Workflow Fix?

bitwarden (a GitHub organization, an official publisher) maintains it in bitwarden/ai-plugins, which has 154 GitHub stars. The repository holds 33 skills in this directory. The repository was last updated on October 6, 2026.

Source: bitwarden/ai-plugins on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.