gha-audit

SkillSecurity

Audit the GitHub Actions workflows in this repo for security, speed, and correctness, and report findings with a proposed diff.

Available today. Use it from your connected AI after setup.

Add ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Then ask your AI: use the gha-audit skill

What this skill tells your AI

The instructions your AI receives, as published by bretfisher/skills in skills/gha-audit/SKILL.md and read by ahel’s review.

Call the Skill tool with "github-actions-workflow-pro" and run its audit path (references/audit.md) against the workflows named in $ARGUMENTS, or every file under .github/workflows/ when no argument is given. Produce the report and proposed diff; leave the workflow files untouched unless the user asks you to apply the fixes.

Signals

GitHub stars
21
Last commit
Sep 2026
Advanced
Item type
skill
Key
gha-audit
Source
github.com/bretfisher/skills