github-actions-ci
Provides a comprehensive guide for setting up and managing CI/CD workflows using GitHub Actions for dotfiles repositories.
Install this skill
or
49/100
Security score
The github-actions-ci skill was audited on Feb 12, 2026 and we found 7 security issues across 3 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 16
Template literal with variable interpolation in command context
SourceSKILL.md
| 16 | ```yaml |
medium line 51
Template literal with variable interpolation in command context
SourceSKILL.md
| 51 | ```yaml |
medium line 68
Template literal with variable interpolation in command context
SourceSKILL.md
| 68 | ```yaml |
medium line 98
Template literal with variable interpolation in command context
SourceSKILL.md
| 98 | ```yaml |
high line 150
Template literal with variable interpolation in command context
SourceSKILL.md
| 150 | **Contexts**: `${{ github.event_name }}`, `${{ github.ref }}`, `${{ github.head_ref }}`, `${{ runner.os }}`, `${{ matrix.platform }}` |
low line 72
Access to hidden dotfiles in home directory
SourceSKILL.md
| 72 | ~/.cache/go-build |
high line 119
Prompting for password/secret input
SourceSKILL.md
| 119 | **[security.md](references/security.md)** - Permissions beyond read/write, secret handling, input validation, pull_request vs pull_request_target, token security, script injection prevention |
Scanned on Feb 12, 2026
View Security DashboardGitHub Stars 2
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
majiayu000/claude-skill-registry-data