github-workflow
Facilitates the creation and editing of GitHub Actions workflows for efficient CI/CD pipeline setup and management.
Install this skill
or
83/100
Security score
The github-workflow skill was audited on Feb 16, 2026 and we found 3 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 76
Template literal with variable interpolation in command context
SourceSKILL.md
| 76 | - Prefer `${{ github.token }}` over PAT when possible |
low line 47
Webhook reference - potential data exfiltration
SourceSKILL.md
| 47 | const webhook = process.env.SLACK_WEBHOOK; |
low line 47
Access to .env file
SourceSKILL.md
| 47 | const webhook = process.env.SLACK_WEBHOOK; |
Scanned on Feb 16, 2026
View Security DashboardInstall this skill with one command
/learn @yaakaito/github-workflow