GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review", or review .github/workflows/ for pwn requests, expression injection, credential theft, and supply chain attacks. Exploitation-focused with concrete PoC scenarios.
Install
npx skills add getsentry/skills --skill gha-security-reviewnpx skills add getsentry/skills --skill gha-security-review -a claude-code -gnpx skills add getsentry/skills --skill gha-security-review -a codex -ggemini skills install https://github.com/getsentry/skills.git --path skills/gha-security-reviewgh skill install getsentry/skills gha-security-reviewgit clone --depth 1 https://github.com/getsentry/skills /tmp/getsentry__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/getsentry__skills/skills/gha-security-review ~/.claude/skills/gha-security-review # Claude Code
cp -R /tmp/getsentry__skills/skills/gha-security-review ~/.agents/skills/gha-security-review # Codex, Cursor, Gemini CLI, Copilot, OpenCode