Audit Github Actions Workflows For Insecure Permissions And Unpi

This ASE skill uses zizmor to audit GitHub Actions workflows and composite actions for security mistakes before they ship. An agent can scan local repos or remote GitHub repositories, flag risky permission scopes and unsafe workflow patterns, and return plain output, GitHub-native findings, or SARIF for follow-up automation.

aibot88 Updated 3 repo stars

File contents

aibot88/sec_skill_store/tree/main/skills/claudskills/audit-github-actions-workflows-for-insecure-permissions-and-unpi commit 110f8e46f7

Frequently asked questions

npx skillmds@latest add aibot88/audit-github-actions-workflows-for-insecure-permissions-and-