Directory / Awesome Copilot skills (GitHub) / github-actions-hardening

github-actions-hardening

Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, harden, or secure a GitHub Actions workflow, when writing a new workflow, or for any request like "is this workflow safe?", "review my CI for security issues", "why is pull_request_target dangerous here?", "pin my actions", or "lock down GITHUB_TOKEN permissions". Covers script injection via ${{ }} interpolation, pull_request_target / workflow_run privilege escalation, SHA-pinning of third-party actions, least-privilege permissions, GITHUB_ENV/GITHUB_OUTPUT injection, secret exposure, OIDC over long-lived credentials, and self-hosted runner exposure on public repositories.
Description from the SKILL.md front matter.

Install

GitHub CLI v2.90+ (Copilot by default)

gh skill install github/awesome-copilot github-actions-hardening

For Claude Code

gh skill install github/awesome-copilot github-actions-hardening --agent claude-code

For Codex

gh skill install github/awesome-copilot github-actions-hardening --agent codex

Commands follow each host's documentation (GitHub Copilot, plus Claude Code, Codex, Cursor via gh skill docs). gh skill needs GitHub CLI 2.90 or later and is in public preview.

Listed from GitHub + community contributors's catalog, not reviewed by us. Read the source before installing.

Catalog: Awesome Copilot skills (GitHub)
Author: Not stated in the source
Source code: github/awesome-copilot
License: MIT (repository license)
Repository stars: 40,178 for github/awesome-copilot (the whole catalog repo)
Added to catalog: Not tracked for this source
Last change: 2026-10-16 (last push to the repo)

What it contains

Skills: 1

Similar in Software development

acquire-codebase-knowledge (Awesome Copilot skill)
acreadiness-assess (Awesome Copilot skill)
acreadiness-generate-instructions (Awesome Copilot skill)
adobe-illustrator-scripting (Awesome Copilot skill)
agentic-eval (Awesome Copilot skill)
ai-ready (Awesome Copilot skill)