github-actions-pipeline-builder
Builds efficient CI/CD pipelines with GitHub Actions for automated testing, deployments, and security scanning.
Install this skill
Security score
The github-actions-pipeline-builder skill was audited on Mar 7, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 103 | ```yaml |
Template literal with variable interpolation in command context
| 157 | ```yaml |
Template literal with variable interpolation in command context
| 186 | ```yaml |
Template literal with variable interpolation in command context
| 213 | ```yaml |
Template literal with variable interpolation in command context
| 316 | ```yaml |
Template literal with variable interpolation in command context
| 347 | ```yaml |
Template literal with variable interpolation in command context
| 386 | ```yaml |
Webhook reference - potential data exfiltration
| 233 | SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }} |
Access to hidden dotfiles in home directory
| 108 | path: ~/.npm |
Access to .env file
| 202 | - Pre-2022: Some teams committed .env files |