github-sandbox-file-downloader
Download files into a GitHub repository by writing special commit messages that trigger a GitHub Actions workflow.
Best use case
github-sandbox-file-downloader is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
Download files into a GitHub repository by writing special commit messages that trigger a GitHub Actions workflow.
Teams using github-sandbox-file-downloader should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/github-sandbox-file-downloader/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How github-sandbox-file-downloader Compares
| Feature / Agent | github-sandbox-file-downloader | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
Download files into a GitHub repository by writing special commit messages that trigger a GitHub Actions workflow.
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
SKILL.md Source
# GitHub Sandbox File Downloader
> Skill by [ara.so](https://ara.so) — Daily 2026 Skills collection.
A GitHub Actions-based tool that lets you download files into your repository simply by writing a specially formatted commit message — no CLI, no tokens, no secrets required.
---
## What It Does
`github-sandbox` listens for commit messages containing `download:` or `download-zip:` commands. When detected, a GitHub Actions workflow runs and:
- **`download:`** — Fetches each URL and saves files individually to `downloads/` using their original filenames.
- **`download-zip:`** — Fetches all URLs and bundles them into a single timestamped `.zip` archive in `downloads/`.
---
## Setup
### 1. Fork the Repository
Fork [maanimis/github-sandbox](https://github.com/maanimis/github-sandbox) into your GitHub account.
### 2. Enable Read/Write Workflow Permissions
1. Go to your forked repo on GitHub
2. Navigate to **Settings → Actions → General**
3. Scroll to **Workflow permissions**
4. Select **Read and write permissions**
5. Click **Save**
No API keys, tokens, or secrets are needed.
---
## Usage
Trigger downloads by committing to your repo with a specially formatted commit message.
### Via GitHub Web UI
1. Open any file (e.g., `README.md`) in your repo
2. Click the **pencil icon** (✏️) to edit
3. Make any minor change (a space, blank line, etc.)
4. In the **Commit changes** box, type your download command
5. Select **Commit directly to the `main` branch**
6. Click **Commit changes**
### Via Git CLI
```bash
# Download individual files
git commit --allow-empty -m "download: https://example.com/file.zip"
# Download multiple files
git commit --allow-empty -m "download: https://example.com/a.zip https://example.com/b.pdf"
# Download and bundle into a ZIP archive
git commit --allow-empty -m "download-zip: https://example.com/a.zip https://example.com/b.pdf"
git push origin main
```
---
## Command Reference
### `download:` — Save Files Individually
```
download: URL1 URL2 URL3
```
**Examples:**
```bash
# Single file
git commit --allow-empty -m "download: https://example.com/dataset.csv"
# Multiple files
git commit --allow-empty -m "download: https://example.com/model.bin https://example.com/config.json https://example.com/vocab.txt"
```
**Output:** Files saved individually to `downloads/` with original filenames:
```
downloads/
dataset.csv
model.bin
config.json
vocab.txt
```
---
### `download-zip:` — Bundle Into ZIP Archive
```
download-zip: URL1 URL2 URL3
```
**Examples:**
```bash
# Single file zipped
git commit --allow-empty -m "download-zip: https://example.com/report.pdf"
# Multiple files bundled
git commit --allow-empty -m "download-zip: https://example.com/a.zip https://example.com/b.pdf https://example.com/c.csv"
```
**Output:** A single timestamped archive in `downloads/`:
```
downloads/
archive_20260423_153012.zip
```
---
## Command Summary Table
| Command | URLs | Output |
|---|---|---|
| `download: URL` | Single | `downloads/filename.ext` |
| `download: URL1 URL2` | Multiple | `downloads/file1.ext`, `downloads/file2.ext` |
| `download-zip: URL` | Single | `downloads/archive_YYYYMMDD_HHMMSS.zip` |
| `download-zip: URL1 URL2` | Multiple | `downloads/archive_YYYYMMDD_HHMMSS.zip` (all bundled) |
---
## How the Workflow Works
The GitHub Actions workflow (`.github/workflows/download.yml`) operates as follows:
```yaml
# Conceptual workflow structure
on:
push:
branches: [main]
jobs:
download:
runs-on: ubuntu-latest
steps:
- name: Check commit message for download command
# Parses commit message for "download:" or "download-zip:"
# Extracts URLs from the message
# Downloads files using curl/wget
# Commits results to downloads/ with [skip ci] to prevent loops
```
Key design details:
- The workflow uses `[skip ci]` in its own commit message to avoid infinite trigger loops.
- If no `download:` or `download-zip:` command is found, the workflow exits without doing anything.
- All output files are committed back to the `downloads/` directory automatically.
---
## Checking Download Results
1. Click the **Actions** tab in your repository
2. Click the latest workflow run to monitor progress and view logs
3. After completion, go to the **Code** tab and open `downloads/` to find your files
---
## Common Patterns
### Downloading a Dataset
```bash
git commit --allow-empty -m "download: https://raw.githubusercontent.com/datasets/covid-19/main/data/worldwide-aggregated.csv"
git push origin main
```
### Downloading Multiple Assets and Archiving
```bash
git commit --allow-empty -m "download-zip: https://example.com/weights.bin https://example.com/tokenizer.json https://example.com/config.yaml"
git push origin main
```
### Downloading a Public GitHub Release Asset
```bash
git commit --allow-empty -m "download: https://github.com/owner/repo/releases/download/v1.0.0/binary-linux-amd64.tar.gz"
git push origin main
```
---
## Troubleshooting
### Workflow doesn't trigger
- Confirm **Read and write permissions** are enabled under **Settings → Actions → General → Workflow permissions**.
- Make sure you committed directly to the `main` branch (not a PR or other branch, unless the workflow is configured otherwise).
- Check the **Actions** tab for any failed or skipped runs.
### Files not appearing in `downloads/`
- Verify the URLs are publicly accessible — no authentication, login, or VPN required.
- Check workflow logs in the **Actions** tab for HTTP errors (403, 404, etc.).
- Ensure URLs don't redirect to a login page.
### Workflow runs in an infinite loop
- This shouldn't happen — the workflow appends `[skip ci]` to its own commit messages.
- If you've modified the workflow file, verify the `[skip ci]` tag is still present in the auto-commit step.
### Multiple URLs not downloading
- Ensure URLs are separated by **spaces only** (no commas).
- Avoid special characters in the commit message that might break shell parsing.
```bash
# ✅ Correct
git commit --allow-empty -m "download: https://example.com/a.zip https://example.com/b.zip"
# ❌ Incorrect (comma separator)
git commit --allow-empty -m "download: https://example.com/a.zip, https://example.com/b.zip"
```
### Commit message not recognized
- The command prefix must be exactly `download:` or `download-zip:` (lowercase, with colon, followed by a space).
- The command must appear in the **commit message subject line** (first line), not the body.
```bash
# ✅ Correct
git commit --allow-empty -m "download: https://example.com/file.zip"
# ❌ Won't trigger (wrong prefix)
git commit --allow-empty -m "Download: https://example.com/file.zip"
```
---
## Notes & Limitations
- **Public URLs only** — downloads require no authentication.
- **GitHub Actions limits apply** — workflow execution time, storage, and API rate limits are subject to your GitHub plan.
- **Branch** — by default, the workflow triggers on pushes to `main`. Check `.github/workflows/` if your default branch differs.
- **File size** — very large files may hit GitHub repository size limits (typically 100MB per file, 1GB total soft limit).Related Skills
zeroboot-vm-sandbox
Sub-millisecond VM sandboxes for AI agents using copy-on-write KVM forking via Zeroboot
I'm not going to create a skill file for this project.
RedSun is a proof-of-concept exploit that abuses Windows Defender's behavior to overwrite system files and gain unauthorized administrative privileges. Creating documentation that makes it easier for AI coding agents to use this tool would directly facilitate unauthorized privilege escalation attacks against Windows systems.
gitbackup-github-desktop
Desktop application to back up all GitHub repositories locally and optionally to AWS S3 or Cloudflare R2 cloud storage
git-city-3d-github-visualization
Build and extend Git City — a 3D pixel art city where GitHub profiles become interactive buildings using Next.js, Three.js, and Supabase.
cubesandbox-ai-sandbox
CubeSandbox — instant, hardware-isolated, E2B-compatible sandbox service for AI agents built on RustVMM/KVM
```markdown
---
yourvpndead-vpn-detection
Android app that detects VPN/proxy servers (VLESS/xray/sing-box) via local SOCKS5 vulnerability, exposing exit IPs and server configs without root
xata-postgres-platform
Expert skill for Xata open-source cloud-native Postgres platform with copy-on-write branching, scale-to-zero, and Kubernetes deployment
x-mentor-skill-nuwa
AI-powered X (Twitter) content strategy skill that distills methodologies from 6 top creators + open-source algorithm data into actionable writing, growth, and monetization guidance.
wx-favorites-report
End-to-end pipeline to extract, decrypt, and visualize WeChat Mac favorites from encrypted SQLite DB into an interactive HTML report.
wterm-web-terminal
Web terminal emulator with Zig/WASM core, DOM rendering, and React/vanilla JS bindings
worldmonitor-intelligence-dashboard
Real-time global intelligence dashboard with AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking