OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill is a security auditing tool designed to help AI agents review GitHub Actions workflows for vulnerabilities like expression injection and pwn requests. It contains detailed documentation of historical attack patterns and malicious indicators, including references to blacklisted domains used in the HackerBot Claw campaign. These references are provided strictly for educational and defensive purposes by a trusted organization, and the skill does not exhibit malicious behavior itself.
2 alerts: gptAnomaly, gptSecurity
No issues
9/10 files flagged
Score: 93/100 · 2 sections analyzed