Official agent skill

Managing GitHub Actions Secrets

by PostHog in PostHog/posthog

Creates and updates GitHub Actions secrets for PostHog workflows.

OfficialCustom licenceAuto-check passedDevOps & Cloud

Install Managing GitHub Actions Secrets

skills CLI
$ npx skills add PostHog/posthog --skill managing-github-actions-secrets -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install PostHog/posthog managing-github-actions-secrets --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/PostHog/posthog.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/managing-github-actions-secrets .claude/skills/managing-github-actions-secrets && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
managing-github-actions-secrets
GitHub stars
40k
Token cost
~836 tokens
SKILL.md length
364 words
Files
1
Skills in repo
252
Repo updated
First seen
Licence
Custom licence

At a glance

Creates and updates GitHub Actions secrets for PostHog workflows.

  • Works in 6 steps: Open . → Click New organization secret (or the… → Set the Name (SCREAMING_SNAKE_CASE,… → …
  • Adding a new CI secret
  • SKILL.md covers The rule, Creating or updating a secret…, Creating or updating a secret… and What not to do, plus 1 more section
  • Calls gh; needs POSTHOGOS_PACKAGER_KEY

What it does

Managing GitHub Actions Secrets is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Creates and updates GitHub Actions secrets for PostHog workflows. Use when adding a new CI secret, rotating an existing secret, wiring a workflow to an API token, package registry credential, deploy key, or any value referenced via ${{ secrets. }} in .github/workflows/.

Its SKILL.md is about 840 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud, covering CI/CD. It works with GitHub Actions and PostHog. The repository describes itself as: :hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error…

When your agent uses it

  • Adding a new CI secret
  • Rotating an existing secret
  • Wiring a workflow to an API token
  • Package registry credential

Example prompts

  • “Use the managing-github-actions-secrets skill to create and updates GitHub Actions secrets for PostHog workflows”
  • “/managing-github-actions-secrets”

Requirements

  • A credential in POSTHOGOS_PACKAGER_KEY

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

  1. Open .
  2. Click New organization secret (or the existing secret to update it).
  3. Set the Name (SCREAMING_SNAKE_CASE, descriptive, like POSTHOGOS_PACKAGER_KEY).
  4. Paste the Value.
  5. Under Repository access, choose Selected repositories and pick the
  6. Click Add secret / Update secret.

What it can do on your machine

Read from SKILL.md and the folder at commit 10f9ad7. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • gh

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • github.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • POSTHOGOS_PACKAGER_KEY

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Managing GitHub Actions Secrets loads about 836 tokens when it runs. Until then it costs about 77 tokens; SKILL.md has 364 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~77
When it runs · the whole SKILL.md, loaded when a task matches
~836

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 364 words (~836 tokens).

“PostHog centralizes all GitHub Actions secrets at the organization level and grants individual repositories access to them. Do not add secrets to a single repo, even if the secret is only consumed by one workflow today.”

— opening of SKILL.md by PostHog, Custom licence
name
managing-github-actions-secrets

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .agents/skills/managing-github-actions-secrets of PostHog/posthog.

Open the folder on GitHubat commit 10f9ad7

Used in 1 other repository

We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders. This page covers the copy in PostHog/posthog, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Managing GitHub Actions Secrets next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Managing GitHub Actions Secrets compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Managing GitHub Actions Secrets this skillPostHog/posthog40k—~836Automated safety check: PassCustom licence
Posthog CI Integrationjeremylongshore/tons-of-skills-marketplace2.8k—~2kAutomated safety check: PassMIT
Analyze GitHub Action Logswithastro/astro63k1 repos~1.3kAutomated safety check: PassCustom licence
GitHub Actions Templatesbartstc/vite-ts-react-template12214 repos~1.9kAutomated safety check: PassMIT
Nushellccusage/ccusage19k—~938Automated safety check: PassCustom licence
Repo Hygiene Scan and FixQwenLM/qwen-code28k—~1.7kAutomated safety check: PassApache-2.0

Similar skills

  • Posthog CI Integration

    jeremylongshore/tons-of-skills-marketplace

    Build repository-specific PostHog CI gates for SDK initialization, typed capture tests, release annotations, and secret boundaries.

    2.8k GitHub stars~2k tokensUpdated today
    DevOps & CloudAuto-check passed
  • Official

    Analyze recent GitHub Actions workflow runs to identify patterns, mistakes, and improvements.

    63k GitHub starsUsed in 1 repo~1.3k tokens
    DevOps & CloudAuto-check passed
  • GitHub Actions Templates

    bartstc/vite-ts-react-template

    Create production-ready GitHub Actions workflows for automated testing, building, and deploying applications.

    122 GitHub starsUsed in 14 repos~1.9k tokens
    DevOps & CloudAuto-check passed
  • Nushell

    ccusage/ccusage

    Guides ccusage Nushell scripts. An agent skill from ccusage/ccusage.

    19k GitHub stars~938 tokensUpdated today
    DevOps & CloudAuto-check passed
  • Scheduled CI skill that scans a repository for small, certain docs, test and code hygiene issues and fixes them on one branch with a commit per finding.

    28k GitHub stars~1.7k tokensUpdated today
    DevOps & CloudAuto-check passed
  • Senior DevOps Toolkit

    maslennikov-ig/claude-code-orchestrator-kit

    Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…

    260 GitHub starsUsed in 6 repos~1.1k tokens
    DevOps & CloudAuto-check: notes

More from PostHog/posthog

All 252 skills in this repo
  • Authoring Log Alerts

    PostHog/posthog

    Official

    Author useful, low-noise log alerts on services in a PostHog project.

    40k GitHub stars~3k tokensUpdated today
    Auto-check passed
  • Official

    Operating procedure for the conflict-autoresolver agent: sweep open PostHog/posthog PRs that conflict with master, resolve the trivial conflicts (generated artifacts deterministically, source…

    40k GitHub stars~4.2k tokensUpdated today
    Auto-check passed
  • Official

    Help users debug PostHog Error Tracking stack-trace symbolication for any supported platform — JavaScript/TypeScript web, React Native (Hermes), Android (Proguard / R8), or iOS / macOS (dSYM).

    40k GitHub stars~2.2k tokensUpdated today
    Auto-check passed
  • Exploring Apm Traces

    PostHog/posthog

    Official

    Investigates distributed application performance using PostHog APM (OpenTelemetry span) data via MCP.

    40k GitHub stars~3.5k tokensUpdated today
    Auto-check passed
  • Exploring LLM Traces

    PostHog/posthog

    Official

    Debug and inspect LLM/AI agent traces using PostHog's MCP tools.

    40k GitHub stars~4.4k tokensUpdated today
    Auto-check passed
  • Investigate Metric

    PostHog/posthog

    Official

    Diagnose why a product metric changed (dropped, spiked, or plateaued) by orchestrating breakdowns, actors, paths, lifecycle, retention, and annotations queries.

    40k GitHub stars~1.9k tokensUpdated today
    Auto-check passed

Categories

Questions about Managing GitHub Actions Secrets

What does Managing GitHub Actions Secrets do?

Creates and updates GitHub Actions secrets for PostHog workflows. Managing GitHub Actions Secrets is an agent skill from PostHog/posthog, published by the product's own GitHub organization. Creates and updates GitHub Actions secrets for PostHog workflows.

When should I use Managing GitHub Actions Secrets?

Managing GitHub Actions Secrets fits situations like: adding a new CI secret; rotating an existing secret; wiring a workflow to an API token; package registry credential.

How do I install Managing GitHub Actions Secrets in Claude Code?

Run `npx skills add PostHog/posthog --skill managing-github-actions-secrets -a claude-code`. Or copy the skill folder (.agents/skills/managing-github-actions-secrets in PostHog/posthog) into .claude/skills/managing-github-actions-secrets in your project. Claude Code loads it when a task matches its description.

How do I install Managing GitHub Actions Secrets in Codex?

Run `npx skills add PostHog/posthog --skill managing-github-actions-secrets -a codex`. Or copy the skill folder (.agents/skills/managing-github-actions-secrets in PostHog/posthog) into .agents/skills/managing-github-actions-secrets in your project. Codex loads it when a task matches its description.

Can I use Managing GitHub Actions Secrets in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add PostHog/posthog --skill managing-github-actions-secrets -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/managing-github-actions-secrets, .gemini/skills/managing-github-actions-secrets, .github/skills/managing-github-actions-secrets and .opencode/skills/managing-github-actions-secrets in your project.

What does Managing GitHub Actions Secrets need to run?

Going by SKILL.md and its folder, Managing GitHub Actions Secrets needs the command-line tools its instructions call (gh) and credentials named POSTHOGOS_PACKAGER_KEY. Our summary lists: A credential in POSTHOGOS_PACKAGER_KEY.

Does Managing GitHub Actions Secrets access the network?

SKILL.md names 1 domain. As links in the text: github.com. This is read from the text; nothing was executed.

Is Managing GitHub Actions Secrets safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Managing GitHub Actions Secrets use?

Managing GitHub Actions Secrets has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Managing GitHub Actions Secrets use?

About 836 tokens (SKILL.md is roughly 3.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Managing GitHub Actions Secrets?

Skills that share tags, products or a category with Managing GitHub Actions Secrets: Posthog CI Integration (jeremylongshore/tons-of-skills-marketplace, 2.8k stars), Analyze GitHub Action Logs (withastro/astro, 63k stars), GitHub Actions Templates (bartstc/vite-ts-react-template, 122 stars) and Nushell (ccusage/ccusage, 19k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Managing GitHub Actions Secrets?

PostHog (a GitHub organization, an official publisher) maintains it in PostHog/posthog, which has 40,182 GitHub stars. The repository holds 252 skills in this directory. The repository was last updated on October 8, 2026.

Source: PostHog/posthog on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.