This ASE skill uses zizmor to audit GitHub Actions workflows and composite actions for security mistakes before they ship. An agent can scan local repos or remote GitHub repositories, flag risky permission scopes and unsafe workflow patterns, and return plain output, GitHub-native findings, or SARIF for follow-up automation.
no risky patterns detected
Type: Agent skill (SKILL.md) · Category: Security · Source: https://github.com/agentskillexchange/skills/tree/HEAD/skills/audit-github-actio
| Capabilities (fewer powerful permissions = higher) | 50/50 |
| Maintenance | 29/35 |
| Documentation | 15/15 |
Always review files before installing. How scores work. Request a correction