ci-cd-architect SKILL.md skillA
ci-cd-architect from ralvarez-ai/ralvaskills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add ralvarez-ai/ralvaskills/ci-cd-architect@v1.2.0Pins v1.2.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- ralvarez-ai/ralvaskills
- Path
skills/infra/ci-cd-architect/SKILL.md- Versions recorded
- 3
- Latest version
- v1.2.0, committed Oct 11, 2026
- First version recorded
- May 22, 2026
- Size
- 13,480 bytes
- Repository stars
- 4
- License
- GPL-3.0
CI/CD principles — pipeline taxonomy, trigger design, supply-chain hygiene (SHA-pinned actions), OIDC cloud auth, caching (and the setup-* cache-key pitfalls that silently disable it), matrix strategy, test gates, release automation, deployment strategies, and running CI locally with act. Suggestion-mode (trade-offs over mandates). GitHub Actions recipes in RECIPES.md. Use when designing, reviewing, or scaffolding CI/CD workflows.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# CI/CD Architecture Framework-agnostic CI/CD principles. The body presents trade-offs and common defaults; concrete pipelines live in [RECIPES.md](RECIPES.md) (GitHub Actions). See [STACK.md](STACK.md) for pinned action/tool versions used in the recipes. This skill is **suggestion-mode**: most CI/CD decisions depend on team size, deployment target, risk tolerance, and existing infra. Each section names the choice, the trade-off, and a common default — not a mandate. Override locally with an ADR when a decision diverges from the suggestion. Image-level rules (Dockerfile, multi-arch, scanning) live in [docker-architect](../docker-architect/SKILL.md); this skill covers only the workflow shape around them. ## 1. Pipeline taxonomy Most projects need four pipeline shapes. Keeping them in separate workflow files is the common default — it makes "what triggers what" obvious and lets each evolve independently. - **CI** — runs on every push and PR. Lint, type-check, test, build. Fast feedback (target under ~10 min). - **Release** — runs on tag or main-branch merge. Produces versioned artifacts (binaries, images, packages). Must be idempotent. …
Read the whole file at its exact version.
How to install
mdr add ralvarez-ai/ralvaskills/ci-cd-architect@sha256:6c3905892cb5b530The line at the top of this page pins the label v1.2.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_hk5info3ovheq4q4)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between May 22, 2026 and Oct 11, 2026, about one every 71 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.2.0 latest | 2026-10-11 | e1924bc | 13,480 B | A | view · diff |
| v1.1.0 | 2026-10-11 | 48faaa9 | 10,589 B | A | view · diff |
| v1.0.0 | 2026-05-22 | f678526 | 10,158 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (13480 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
ralvarez-ai/ralvaskills · 4 stars · license GPL-3.0 · pushed 2026-11-02 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_hk5info3ovheq4q4 GET https://markdownregistry.com/api/v1/resolve?ref=ralvarez-ai/ralvaskills/ci-cd-architect GET https://markdownregistry.com/api/v1/blob/6c3905892cb5b53050f3eae848fae27045c35f0798d1977070a09cd3f8f41015
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.