{
  "id": "skl_github_awesome_copilot_skills_github_act_ab0d213c",
  "kind": "skill",
  "category": "ferramentas",
  "name": "github-actions-hardening",
  "tagline": "Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern",
  "body": "Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, harden, or secure a GitHub Actions workflow, when writing a new workflow, or for any request like \"is this workflow safe?\", \"review my CI for security issues\", \"why is pull_request_target dangerous here?\", \"pin my actions\", or \"lock down GITHUB_TOKEN permissions\". Covers script injection via ${{ }} interpolation, pull_request_target / workflow_run privilege escalation, SHA-pinning of third-party actions, least-privilege permissions, GITHUB_ENV/GITHUB_OUTPUT injection, secret exposure, OIDC over long-lived credentials, and self-hosted runner exposure on public repositories.",
  "url": "https://github.com/github/awesome-copilot/blob/main/skills/github-actions-hardening/SKILL.md",
  "status": "live",
  "origin": "directory",
  "origin_id": "github/awesome-copilot/skills/github-actions-hardening",
  "install": "https://raw.githubusercontent.com/github/awesome-copilot/main/skills/github-actions-hardening/SKILL.md",
  "source": "https://github.com/github/awesome-copilot",
  "transporte": "",
  "ns": "github",
  "versao": "",
  "oficial_status": "",
  "repo_host": "github.com",
  "topico": "vcs",
  "linguagem": "JavaScript",
  "licenca": "MIT",
  "repo_topics": " agent-skills agents ai awesome custom-agents github-copilot hacktoberfest prompt-engineering ",
  "repo_slug": "github/awesome-copilot",
  "stars": 38819,
  "forks": 4918,
  "prs_abertos": 25,
  "pushed_at": "2026-09-09T20:51:49Z",
  "repo_estado": "ativo",
  "likes": 0,
  "comments": 0,
  "visits": 0,
  "readme_bytes": 60000,
  "readme_api": "https://agentalog.com/api/listings/skl_github_awesome_copilot_skills_github_act_ab0d213c/readme",
  "readme_fonte": "repo",
  "created_at": "2026-08-30 01:59:06",
  "updated_at": "2026-09-09 12:02:10",
  "mine": false,
  "api": "https://agentalog.com/api/listings/skl_github_awesome_copilot_skills_github_act_ab0d213c",
  "go": "https://agentalog.com/api/go/skl_github_awesome_copilot_skills_github_act_ab0d213c",
  "comments_api": "https://agentalog.com/api/listings/skl_github_awesome_copilot_skills_github_act_ab0d213c/comments",
  "readme_sha": "9583d19b8953cf3d74e45ef2b974c7395d0eb920b67aacafa933b2de04eafbb8",
  "readme_em": "2026-08-31 06:37:01",
  "payload": {
    "skill": "github-actions-hardening",
    "repo": "github/awesome-copilot",
    "path": "skills/github-actions-hardening",
    "commit": "7568a482ce2df38f8965ab5336a3220db796a4ba",
    "provider_declarado": "github",
    "categoria": "development",
    "license": "",
    "tipo": "full",
    "manutencao": "maintained",
    "qualidade": 70,
    "requer_mcp": false
  }
}