authoring-github-workflows
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- External Tool Acquisition: The skill downloads the actionlint binary from GitHub. This is a standard practice for workflow validation. The implementation includes a checksum verification step using sha256sum to ensure the integrity of the downloaded file before it is extracted or executed.
- Project Inspection: The skill utilizes standard command-line utilities such as git, grep, and curl. These tools are used as intended to identify changes in the repository and fetch the necessary validation software.
- Security Best Practices: The instructions provide valuable guidance on preventing common YAML parsing errors that can lead to workflow failures, specifically addressing how to handle expressions and special characters safely within GitHub Actions files.
Audit Metadata