Skip to main content

cicd-gitea-workflows-dev

Facilitates the development and troubleshooting of Gitea Actions workflows, ensuring smooth CI processes and migration from GitHub Actions.

Install this skill

or
47/100

Security score

The cicd-gitea-workflows-dev skill was audited on Mar 4, 2026 and we found 15 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 24

Template literal with variable interpolation in command context

SourceSKILL.md
24| Secrets syntax | `${{ secrets.NAME }}` | `${{ secrets.NAME }}` (same) |
medium line 74

Template literal with variable interpolation in command context

SourceSKILL.md
74```yaml
medium line 89

Template literal with variable interpolation in command context

SourceSKILL.md
89```yaml
medium line 100

Template literal with variable interpolation in command context

SourceSKILL.md
100```yaml
medium line 130

Template literal with variable interpolation in command context

SourceSKILL.md
130```yaml
medium line 300

Template literal with variable interpolation in command context

SourceSKILL.md
300```yaml
medium line 158

Wget to non-GitHub URL

SourceSKILL.md
158wget https://gitea.com/gitea/act_runner/releases/latest/download/act_runner-linux-amd64
low line 134

Access to hidden dotfiles in home directory

SourceSKILL.md
134~/.cache/go-build
low line 67

External URL reference

SourceSKILL.md
67- uses: https://gitea.example.com/owner/action@v1
low line 83

External URL reference

SourceSKILL.md
83${{ gitea.server_url }} # https://gitea.example.com
low line 84

External URL reference

SourceSKILL.md
84${{ gitea.api_url }} # https://gitea.example.com/api/v1
low line 158

External URL reference

SourceSKILL.md
158wget https://gitea.com/gitea/act_runner/releases/latest/download/act_runner-linux-amd64
low line 163

External URL reference

SourceSKILL.md
163--instance https://gitea.example.com \
low line 237

External URL reference

SourceSKILL.md
237- uses: https://gitea.example.com/mirrors/checkout@v4
low line 333

External URL reference

SourceSKILL.md
333- [act_runner Documentation](https://gitea.com/gitea/act_runner)
Scanned on Mar 4, 2026
View Security Dashboard