gha-security-review - GitHub Actions Security Review
Find exploitable vulnerabilities in GitHub Actions workflows
Tags
Updated: 2026-05-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Review workflow files
- Analyze workflow triggers
- Check vulnerability classes
- Trace attack paths
- Validate exploitation scenarios
- Report security findings
Inputs
- GitHub Actions workflow files
- Composite action definitions
- Configuration files
- Reference documentation
Outputs
- Security vulnerability report
- Exploitation scenarios
- Verification requests
- Workflow analysis findings
Requirements
- GitHub repository access
- Workflow YAML parsing
- Reference documentation loading