wrdn-gha-workflows

What problem does it solve?

This Skill helps security reviewers identify and trace exploitable GitHub Actions workflows where attacker-controlled inputs reach privileged steps, enabling code execution, secret leakage, or runner compromise.

Core Features & Use Cases

• Trace risks across .github/workflows, action.yml, and reusable workflows to map end-to-end exploit chains.
• Provide structured findings with entry points, inputs, sinks, and remediation guidance for PRs, workflow_call, and workflow_dispatch scenarios.
• Use documented references to distinguish safe patterns from exploit patterns and to calibrate severity.

Quick Start

Review the repository's workflows to surface exploitable input-to-sink chains and suggest concrete hardening steps.