github-actions-script-injection

SUSPICIOUS/HIGH-RISK skill. While framed as a GitHub Actions security audit aid, it materially equips the agent to perform offensive exploitation, secret exfiltration, stealthy validation, and escalation against CI environments. The main risk is not mere workflow analysis but instructions to weaponize findings and route stolen data to attacker-controlled endpoints.