python-github-actions
Optimizes Python CI/CD workflows on GitHub Actions with caching, matrix testing, and secure package publishing.
Install this skill
Security score
The python-github-actions skill was audited on Feb 21, 2026 and we found 13 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 16 | | Install Python | `uv python install ${{ matrix.python-version }}` | |
Template literal with variable interpolation in command context
| 57 | ```yaml |
Template literal with variable interpolation in command context
| 100 | ```yaml |
Template literal with variable interpolation in command context
| 217 | ```yaml |
Template literal with variable interpolation in command context
| 237 | ```yaml |
Template literal with variable interpolation in command context
| 298 | ```yaml |
Template literal with variable interpolation in command context
| 340 | ```yaml |
Template literal with variable interpolation in command context
| 440 | ```yaml |
Template literal with variable interpolation in command context
| 584 | ```yaml |
Template literal with variable interpolation in command context
| 624 | ```yaml |
Access to hidden dotfiles in home directory
| 221 | path: ~/.cache/pip |
Access to hidden dotfiles in home directory
| 229 | path: ~/.cache/pre-commit |
Access to hidden dotfiles in home directory
| 628 | path: ~/.cache |