github-actions-cache-poisoning

MALICIOUS: this skill’s core purpose is offensive exploitation of GitHub Actions caches to achieve code execution in privileged workflows and exfiltrate secrets. Install provenance is mostly official and not the concern; the decisive issue is that the skill operationalizes CI compromise, token extraction, poisoned dependency delivery, and outbound secret theft.