pantheon-ai/github-actions-generator
Comprehensive toolkit for generating best practice GitHub Actions workflows, custom local actions, and configurations following current standards and conventions. Use this skill when creating new GitHub Actions resources, implementing CI/CD workflows, or building reusable actions.
80
100%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill explicitly instructs the agent to fetch and consult public action documentation and repositories (see SKILL.md "When using public actions" and references/common-actions.md / use of mcp__context7__get-library-docs), meaning it will read untrusted, user-generated content from GitHub/Marketplace/public docs and use that information to decide action versions and workflow steps.
Where we found it
github.com/marketplace
domain · 2 sites
The plugin references GitHub Marketplace as a source to fetch action documentation, instructing the agent to consult untrusted user-generated content from the marketplace.
references/common-actions.md
651
- GitHub Marketplace: https://github.com/marketplace
references/custom-actions.md
211
2. Or visit: `https://github.com/marketplace/actions/your-action`
context7
domain · 3 sites
The plugin explicitly instructs the agent to use Context7 MCP (mcp__context7__resolve-library-id and mcp__context7__get-library-docs) to fetch action documentation, which reads untrusted external content.
SKILL.md
155
2. **Or use Context7 MCP:**
SKILL.md
156
- `mcp__context7__resolve-library-id` to find action
SKILL.md
157
- `mcp__context7__get-library-docs` for documentation
github.com
domain · 3 sites
The plugin references GitHub action repositories (github.com/[owner]/[repo]) as official sources to fetch action documentation, release notes, and verify SHAs, instructing the agent to read untrusted user-generated content from public repositories.
references/common-actions.md
652
- Action repository: https://github.com/[owner]/[repo]
references/common-actions.md
653
- Release notes: https://github.com/[owner]/[repo]/releases
references/common-actions.md
658
- Find SHA from tags: `git ls-remote https://github.com/[owner]/[repo] [tag]`
- Audited
- Security analysis