gha-security-review - GitHub Actions Security Review
Find exploitable vulnerabilities in GitHub Actions workflows
Tags
Updated: 2026-05-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- review workflow files
- classify triggers
- check vulnerability classes
- validate attack paths
- report findings
Inputs
- GitHub Actions workflow files
- action configuration files
- workflow trigger events
- reference documentation
Outputs
- vulnerability findings report
- exploitation scenarios
- security recommendations
- review status
Requirements
- GitHub repository access
- workflow YAML file access
- reference documentation access