Skip to content
Kitbay
Submit
SkillOfficial

review-agentic-workflows

MITUpdated on Nov 11, 20265,616GitHub stars

A review skill from GitHub's gh-aw project for changes to agentic workflow files under .github/workflows and the .lock.yml files compiled from them.

InstallRepository Checked on Nov 13, 2026

What the skill teaches

A review skill from GitHub's gh-aw project for changes to agentic workflow files under .github/workflows and the .lock.yml files compiled from them. The agent checks that the gh aw CLI extension is installed, limits the review to changed workflows, compiles them in strict mode with scanners such as actionlint, zizmor, poutine and shellcheck, and flags edits that weaken protections, such as broader permissions, unpinned actions or wider network access. When run IDs are available it audits recent runs and logs to suggest cost and reliability fixes. Each revision gets exactly one read-only security reviewer.

Capabilities

  • Compile changed agentic workflows with security scanners
  • Flag permission or network changes that weaken protections
  • Audit past workflow runs for cost and retry problems
  • Review drift in generated .lock.yml files

Other MCP servers and skills for GitHub