github-desktop-release
GitHub Actions Windows desktop installer qualification plus GitHub Release orchestration for already-qualified desktop artifacts.
Connecting the steps of a workflow
What it does
Treat a desktop release as a state machine, not a build command. Keep application implementation, platform qualification, artifact identity, and public GitHub Release state as separate evidence boundaries.
Use when Codex must build, qualify, or diagnose Windows installers in GitHub Actions, or must promote, publish, resume, or authoritatively…
You don’t need to name it. Ask for the job in your own words — your AI loads the skill when the request matches.
What it can touch
Includes 9 scripts
Your AI can run these when the skill is used — on your computer in a coding tool (which asks first unless you have told it not to), or in the AI’s own sandbox in Claude and ChatGPT.
How we know
Found in the skill’s folder: scripts/classify-actions-failure.mjs, scripts/github-desktop-promotion.mjs, scripts/preflight-windows-release.ps1, scripts/replay-release-evidence.mjs….
Uses terminal commands
It shows your AI commands to run. In a coding agent that means your terminal; in a chat app it usually can’t.
How we know
The SKILL.md contains shell code blocks.
2 smaller things worth knowing
Contains commands that delete or overwrite. Usually legitimate — listed so nothing is hidden.
How we know
Contains commands that delete or overwrite — scripts/test-preflight.ps1 line 213; Contains commands that delete or overwrite — scripts/test-workflow-assets.ps1 line 370. Read 2026-10-05, commit ff0342b.
scripts/test-preflight.ps1, line 213 ↗scripts/test-workflow-assets.ps1, line 370 ↗No serious risk pattern found
Launch7’s automated check read all 29 text files in this skill and matched none of its serious risk patterns. This is not a guarantee: a check like this can miss new or disguised tricks, and the author can change the files after the check.
How we know
Read 2026-10-05, commit ff0342b by pipeline/trust/analyze.py — 40+ patterns for hidden text, prompt injection, downloads that run, credential access and more. It reads; it never runs the skill.
Recently maintained
Its repository has had changes recently.
How we know
Last push to EthanYoQ/Skill-hub: 2026-10-05 (0 days before the scan).
Read automatically from the skill’s own files on GitHub on 5 Oct 2026. Launch7 does not run or manually review skills: this lists what the check saw, and nothing here means “safe”. How we check
Add it to your AI
Partly. Upload it in Claude’s settings — the instructions work; the scripts need the full folder.
Built in your browser from the SKILL.md on GitHub — nothing passes through Launch7.
In Claude, open Customize → Skills, press +, then Create skill → Upload a skill, and choose the .zip.
Make sure code execution is switched on (Settings → Capabilities). Skills need it.
Start a new chat and ask for the job in your own words — Claude picks the skill up when it fits.
This skill ships 9 scripts beside its instructions. The download here is the SKILL.md alone — enough for the instructions, not for the parts that run code. Use the command route, or take the full folder from the repository.
How Claude does this: support.claude.com · checked 28 Sep 2026 · “Supported” means documented by the vendor; Launch7 has not run it end to end
More from EthanYoQ
All from this publisher →- github-readme-visuals
Create or refresh screenshot-led product hero images, localized interface captures, and image-led README sections for GitHub repositories.
- jianying-editor
The publisher’s description is only a heading. Open the skill to read what it does.
- ppt-nano
The publisher’s description is only a heading. Open the skill to read what it does.
- skill-lifecycle-manager
Manage Agent Skills across Codex, Claude Code, local/global/project roots, Skill Hubs, GitHub, skills.sh, and managed plugin caches.
- xhs-pharma-social-listening
Run evidence-disciplined Xiaohongshu social listening for foreign pharma employee pain points.
