The Agent Skills Directory

[COMMAND_EXECUTION]: The skill employs standard developer utilities such as zizmor, actionlint, and pinact to audit and secure GitHub Actions workflows. It also provides installation instructions using reputable package managers like brew and pacman to ensure prerequisites are met for local linting.
[CREDENTIALS_UNSAFE]: The skill instructs the agent to retrieve a GitHub token via the official gh auth token command to enable online security audits in zizmor. This is a recommended practice that avoids hardcoded credentials and ensures the token is handled securely within the local execution environment.
[EXTERNAL_DOWNLOADS]: References to external GitHub Actions (e.g., actions/checkout, rhysd/actionlint, zizmorcore/zizmor-action) and package repositories are directed at trusted, well-known, and official sources. These dependencies are necessary for the security hardening tasks described in the skill.

zizmor-resolution