Catch prompt injection risks in GitHub Actions.
Audits AI-enabled GitHub Actions workflows and produces actionable security findings with evidence, attack paths, and remediation.
When to use it
Use when reviewing GitHub Actions workflows that invoke AI agents, checking prompt injection paths, or assessing security-sensitive configurations and triggers.
Give it a local repository or a GitHub repository URL; it returns a structured security findings report without modifying workflows.
What you provide
No setup requirements listed.
This skill
GitHub
Fetches workflows from GitHub