Skip to content
Kitbay
Submit
SkillOfficial

developer-security

MITUpdated on Nov 11, 20265,616GitHub stars

A security reference for contributors to gh-aw, covering both the workflows it generates and its Go code.

InstallRepository Checked on Nov 13, 2026

What the skill teaches

A security reference for contributors to gh-aw, covering both the workflows it generates and its Go code. Topics include preventing template injection in GitHub Actions expressions, handling values that may be empty across different triggers, writing safe shell scripts, supply chain hardening, workflow structure and permissions, connecting static analysis tools and how to report review findings. An agent uses it when building or reviewing gh-aw features.

Capabilities

  • Prevent template injection in generated workflows
  • Harden shell scripts and the supply chain
  • Set workflow permissions correctly
  • Report security review findings

Other MCP servers and skills for GitHub