gha-security-review

github:getsentry/skills · first committed 2026-04-19 · source · badge

GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review", or review .github/workflows/ for pwn requests, expression injection, credential theft, and supply chain attacks. Exploitation-focused with concrete PoC scenarios.

Skill Health 100 (freshness and quality) estimated by backskills

Listed, not yet scored. This skill has no public model test yet. It is in the scoring queue; submitted skills go first, then the most-installed.

Freshness 100 · Quality 100 · Efficacy not yet tested

Version history

3 commits to this file on GitHub (newest first).

2026-09-26 · commit e99aa67 · fix(gha-security-review): remove commas from allowed-tools

2026-08-08 · commit 7e127fe · fix(gha-security-review): Pin third-party actions only

2026-04-19 · commit 24361e7 · ref(skills): Load sentry-skills plugin from repo root (#117)

Archived snapshots

archived 2026-10-31T09:00:47+00:00 · sha256 b75c6c43ff99