Security best practices for gh-aw workflows and Go code: template injection prevention, shell script security, supply chain hardening, and static analysis integration.
Install
npx skills add github/gh-aw --skill developer-securitynpx skills add github/gh-aw --skill developer-security -a claude-code -gnpx skills add github/gh-aw --skill developer-security -a codex -ggemini skills install https://github.com/github/gh-aw.git --path .github/skills/developer-securitygh skill install github/gh-aw developer-securitygit clone --depth 1 https://github.com/github/gh-aw /tmp/github__gh-aw
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/github__gh-aw/.github/skills/developer-security ~/.claude/skills/developer-security # Claude Code
cp -R /tmp/github__gh-aw/.github/skills/developer-security ~/.agents/skills/developer-security # Codex, Cursor, Gemini CLI, Copilot, OpenCode