Detects exploitable GitHub Actions workflow vulnerabilities, including pull_request_target pwn requests, unsafe PR checkout, expression injection in run steps and actions/github-script blocks, workflow_dispatch and workflow_call input command injection, comment- and discussion-triggered commands, TOCTOU between approval and checkout, secret exposure, broad permissions, reusable workflows that…
Install
npx skills add getsentry/warden-skills --skill wrdn-gha-workflowsnpx skills add getsentry/warden-skills --skill wrdn-gha-workflows -a claude-code -gnpx skills add getsentry/warden-skills --skill wrdn-gha-workflows -a codex -ggemini skills install https://github.com/getsentry/warden-skills.git --path skills/wrdn-gha-workflowsgh skill install getsentry/warden-skills wrdn-gha-workflowsgit clone --depth 1 https://github.com/getsentry/warden-skills /tmp/getsentry__warden-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/getsentry__warden-skills/skills/wrdn-gha-workflows ~/.claude/skills/wrdn-gha-workflows # Claude Code
cp -R /tmp/getsentry__warden-skills/skills/wrdn-gha-workflows ~/.agents/skills/wrdn-gha-workflows # Codex, Cursor, Gemini CLI, Copilot, OpenCode