Home / Skills / github-actions-hardening
github-actions-hardening
Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers runn
- License
- MIT
- SKILL.md tokens
- 2,447
- Bundled files
- 5
- Bundled tokens (estimated)
- 3,508
Cost per 1,000 loads
Estimated input cost per 1,000 loads of SKILL.md only (characters ÷ 4). Bundled files, output tokens and execution are excluded.
| Model | Input / 1M tokens | 1,000 loads |
|---|---|---|
| Claude Opus 5 | $5.00 | $12.23 |
| Claude Sonnet 5 | $2.00 | $4.89 |
| Claude Haiku 4.5 | $1.00 | $2.45 |
Safety flags
Detected automatically from files; not a security audit.
- Runs scripts
- No
- Network access
- No
- Shell commands
- Yes
Works with
Open SKILL.md format
- Claude Code
- Codex
- Cursor
- GitHub Copilot
- Gemini CLI
- OpenCode
- Goose
Install
npx skills add github/awesome-copilot --skill github-actions-hardeningLast verified:
github-actions-hardening FAQ
What does the github-actions-hardening skill do?
Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers runn Source: https://github.com/github/awesome-copilot/blob/main/skills/github-actions-hardening/SKILL.md
What does the github-actions-hardening skill cost to load?
SKILL.md is about 2,447 tokens. Estimated input cost per 1,000 loads: Claude Opus 5 $12.23; Claude Sonnet 5 $4.89; Claude Haiku 4.5 $2.45. Estimated input cost per 1,000 loads of SKILL.md only (characters ÷ 4). Bundled files, output tokens and execution are excluded. Prices: https://docs.anthropic.com/en/docs/about-claude/pricing
How do I install the github-actions-hardening skill?
Skills CLI: npx skills add github/awesome-copilot --skill github-actions-hardening. Download the github-actions-hardening skill folder as a ZIP and upload it in Claude.ai skills settings.
Is the github-actions-hardening skill safe?
Automatically detected flags: shell commands. Flags are detected automatically from the skill's files and are not a security audit; review the SKILL.md before installing.