FreeSkills
Commits, branches and sync with the but CLI
- 361361 downloads
- 198198 likes
- 103103 saves
Works with
- Claude Code
- Codex
- Cursor
- and 3 more
Auditing GitHub Actions workflows that run AI agents v1.0.0
Use this resource to audit GitHub Actions workflows that run AI agents
New
- 481 downloads
- 163 likes
- 121 saves
Free
Install with the CLI
In a terminal, from the folder you want:
npx --yes palatekit@latest install github-actions-ai-agent-audit-2With no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.
First time: connect the CLI with
npx --yes palatekit@latest loginThe agent finds workflows and actions that invoke an AI agent, follows references into composite actions, then looks for attack vectors: third-party-controlled input, weak sandboxing and overly broad actor rules. It reports each finding with its evidence. You get an audit of CI chains to fix.
Mostly picked by
Updated November 2, 2026
Previews
Details
- Install guides
- Generates with
- Your agent's model
- Licence
- MIT
Similar resources
View all- Free
FreeSkills
Sentry CLI guide
- 525525 downloads
- 117117 likes
- 128128 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Drizzle ORM best practices with PostgreSQL
- 407407 downloads
- 194194 likes
- 151151 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
SLO design wizard
- 537537 downloads
- 105105 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
User stories and sprint fit
- 451451 downloads
- 150150 likes
- 132132 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Capacity-based sprint plan
- 423423 downloads
- 192192 likes
- 102102 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Startup CTO advisor
- 580580 downloads
- 201201 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Creating GitHub pull requests with quality checks
- 427427 downloads
- 230230 likes
- 196196 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
What you get
- SKILL.md: six-step method, from analysis mode to reporting
- references/: twelve files on attack vectors and action profiles
Good fit for
- An AI review workflow reads PR comments
- You add a coding agent to your CI and want to check it
Not for
Tags
- github actions
- ai agents
- injection
- ci
- audit
About
You say
“Audit the GitHub Actions workflows in this repository that run an AI agent.”
Skill published by waybarrios under the MIT license, delivered in its original version.
Show moreShow less
How to use it
- Install the skill in your agent's skills folder
- Ask your agent to audit GitHub Actions workflows that run AI agents
- Review and adjust the result
Content preview
Files
- LICENSE1 KB
- NOTICE-PALATEKIT.md0.5 KB
- references/action-profiles.md8.8 KB
- references/cross-file-resolution.md10.6 KB
- references/foundations.md5.1 KB
- references/vector-a-env-var-intermediary.md4.5 KB
- references/vector-b-direct-expression-injection.md4.5 KB
- references/vector-c-cli-data-fetch.md5 KB
- references/vector-d-pr-target-checkout.md5.2 KB
- references/vector-e-error-log-injection.md5.3 KB
- references/vector-f-subshell-expansion.md5.7 KB
- references/vector-g-eval-of-ai-output.md5.6 KB
- references/vector-h-dangerous-sandbox-configs.md5.5 KB
- references/vector-i-wildcard-allowlists.md4.4 KB
- SKILL.md20.7 KB
Origin and licence
Listed unmodified
- Author
- waybarrios
- Source
- github.com/waybarrios/opencode-power-pack/tree/c3328ad1633c1561026532f29b718a2380bc52ee/skills/agentic-actions-auditor
- Licence
- MIT
Notice
« agentic-actions-auditor » (waybarrios, MIT) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.
User reviews
–
No ratings yet
Loading reviews…