gha-security-review
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured instructions for identifying security vulnerabilities in GitHub Actions workflows, such as expression injection and unsafe triggers.
- [SAFE]: No instances of prompt injection, obfuscation, or persistence mechanisms were identified in the skill's instructions.
- [SAFE]: References to external sources point to well-known infrastructure and official project domains.
- [SAFE]: The skill uses standard analytical tools (Grep, Bash, Task) for processing text-based workflow files, consistent with its stated purpose.
Audit Metadata