ci-cd-pipeline SKILL.md skillA
This file is byte-identical to the first copy the registry indexed, one of 3 indexed copies. Same content hash, so the same checks give both the same grade.
ci-cd-pipeline from daishiman/harness-dev is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add daishiman/harness-dev/ci-cd-pipeline@git:20261002.c0e127dPins git:20261002.c0e127d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- daishiman/harness-dev
- Path
.agents/skills/ci-cd-pipeline/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261002.c0e127d, committed Oct 2, 2026
- Size
- 32,416 bytes
- Repository stars
- 10
- License
- none declared
Cloudflare WorkersのCI(自動検査)とCD(自動デプロイ)を、Workers Buildsまたは外部CI/CDから案件に合う1経路だけ選び、無料枠に収まる最小構成で構築・運用するためのスキル。 「CIを入れて」「CDを組んで」「自動デプロイしたい」「GitHub Actions」「ワークフロー」「テストを自動で回したい」 「マージしたら勝手に公開されるようにして」「デプロイを自動化して」「CIが落ちた」「Actionsが失敗する」 「デプロイの手作業をなくしたい」「Cloudflareの設定が分からない」「非エンジニア向け手順を作って」などの文脈で必ず使用する。 デプロイ先が Cloudflare Workers の場合は Skill cloudflare-secure-deploy を併用する(D1マイグレーションの扱いが最重要)。ブランチ・PR・タグの規約は Skill solo-git-flow に従う。手動デプロイを繰り返している状況を見つけたら、依頼されていなくても このスキルの §0 を読んで導入可否を判断すること。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# ci-cd-pipeline — deploy経路を1つに絞る最小 CI/CD 手動デプロイは「人が正しく手順を踏んだ」という申告の上に成り立つ。申告は外れる。 **CI/CD の本質は自動化による時短ではなく、「言ったこと」と「実際に起きたこと」の乖離を機械が検出することにある。** - 外部CI/CDのワークフロー全文(必要時だけ読む): `references/workflows.md` - Node.js・パッケージマネージャ共通部品(npm / yarn / pnpm): `assets/detect-pm.yml` → `.github/actions/detect-pm/action.yml` - 無料枠の実数と削減手法: `references/cost-control.md` - 失敗パターンと対処: `references/troubleshooting.md` - 外部CI/CDを選んだ場合の雛形: `assets/ci.yml` / `assets/deploy.yml` / `assets/migrate.yml`(必要なものだけ配置) - 非エンジニア向けCloudflare設定票: `assets/cloudflare-credentials-guide.md.template` - 設定票と秘密値非表示helperの生成: `scripts/generate-cloudflare-credentials-guide.mjs` - 資格情報ガイド・helper・workflowの退行検査: `scripts/validate-cloudflare-credentials-guide.mjs` - GitHub対象リポジトリの安全な自動検出: `scripts/detect-github-repository.mjs` - 自動検出と停止診断の実動テスト: `scripts/test-auto-discovery.mjs` --- ## §0. 入れる前の判断 ### 最初にdeploy責任者を1つ選ぶ Cloudflare公式は、GitHub/GitLabで最小設定なら Workers Builds、外部統制が必要なら外部CI/CDとする。キットの既定スタックは D1 を含むため、**既定は外部CI/CD**(`mvp-first-development` §3 の「CI/CD」行が正本)。次の決定表でそれを具体化する。 | 条件 | 選ぶ経路 | 作るもの | |---|---|---| …
Read the whole file at its exact version.
How to install
mdr add daishiman/harness-dev/ci-cd-pipeline@sha256:1bd8a37120e7e9bcThe line at the top of this page pins the label git:20261002.c0e127d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_nxdcu2avfhzgvesf)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 2, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (32416 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
daishiman/harness-dev · 10 stars · license none declared · pushed 2026-10-19 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_nxdcu2avfhzgvesf GET https://markdownregistry.com/api/v1/resolve?ref=daishiman/harness-dev/ci-cd-pipeline GET https://markdownregistry.com/api/v1/blob/1bd8a37120e7e9bc02f1fed5401e2d4c7af473cd41b1647b00599d625b5f0d56
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from daishiman/harness-dev
Every file in daishiman/harness-dev