The Agent Skills Directory

[SAFE]: The skill provides high-quality documentation for GitHub Actions, emphasizing security best practices such as SHA pinning for actions and OIDC for cloud authentication.
[EXTERNAL_DOWNLOADS]: The maintenance script scripts/check-updates.py connects to github.blog to fetch RSS feed updates for the Actions platform. This uses official channels for version tracking and does not execute remote code.
[COMMAND_EXECUTION]: All provided command-line examples represent standard CI/CD practices (e.g., npm install, pytest, docker build). No suspicious or unauthorized command execution patterns were found.
[CREDENTIALS_UNSAFE]: The reference files use standard GitHub Actions secret syntax (e.g., ${{ secrets.GITHUB_TOKEN }}) and placeholder values for database examples. No actual sensitive credentials or hardcoded keys are present.

github-actions