Loading...
Loading...
Found 4 Skills
GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review", or review .github/workflows/ for pwn requests, expression injection, credential theft, and supply chain attacks. Exploitation-focused with concrete PoC scenarios.
Create and audit GitHub Actions workflows. Use when adding CI/CD, reviewing workflow files, or fixing action pinning.
Create and audit GitHub Actions workflows with SHA pinning, permissions, and caching checks. Use when adding CI/CD, reviewing workflow files, or fixing action pinning.
Explain maps, variants, and curriculum ordering used by a training command or recipe. Use when asked to audit a recipe configuration.