github-actions-local
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script 'scripts/run-act.py' fetches the nektos/act CLI binary from official GitHub releases (github.com/nektos/act) using the urllib.request module. This is a core part of the skill's functionality to provide the local CI environment.
- [COMMAND_EXECUTION]: The script uses subprocess.call to execute the act binary and check the local Docker environment. Commands are constructed using argument lists rather than raw shell strings, which follows security best practices to prevent shell injection.
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an external binary (act) to perform its primary task. The source is a reputable and widely used open-source project.
- [PROMPT_INJECTION]: The skill processes workflow files and payloads from target repositories, creating a surface for indirect prompt injection if the ingested data contains malicious CI instructions.
- Ingestion points: Reads files from .github/workflows/, .env, .secrets, and .vars within the repository provided via the --repo argument.
- Boundary markers: None (treats workflow content as executable instructions).
- Capability inventory: Uses subprocess.call to execute the act binary, which can then execute any shell script defined in the workflow files.
- Sanitization: No sanitization is performed on workflow content as the tool is designed to execute defined automation logic.
Audit Metadata