The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The deploy.yml workflow downloads and executes a shell script from an external URL (cli.moonbitlang.com/install/unix.sh) by piping it directly to bash. This pattern lacks integrity verification and allows for arbitrary code execution from a non-trusted source.\n- [COMMAND_EXECUTION]: The deploy.yml workflow is vulnerable to shell command injection. The inputs.message parameter, which can be supplied by a user via workflow_dispatch, is interpolated directly into a bash script within a run block (msg=\"${{ inputs.message }}\"). An attacker providing a message containing shell metacharacters (e.g., "; ; ") could execute arbitrary commands on the GitHub Actions runner.\n- [EXTERNAL_DOWNLOADS]: The workflow uses npx -y @dotenvx/dotenvx@latest, which fetches and runs the latest version of the dotenvx tool at runtime without version pinning. This introduces a supply chain risk as the executed code is not verified against a specific hash or version.\n- [EXTERNAL_DOWNLOADS]: The workflows reference future, non-existent versions of standard GitHub Actions (e.g., actions/checkout@v7, actions/setup-node@v7, actions/cache@v6) and Node.js (24). These references will cause the workflow to fail in standard environments and indicate significant configuration errors.

cloudflare-workers-cd-rollback