Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,008
pages available: 1,209

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 1,537–1,560 of 29,008 skills

Gh Aw Trigger Scope And Event AuthorizationAUse when a task involves reviewing which GitHub events are allowed to start an agentic workflow to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change produc...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Trigger Rate And Abuse ThrottleAUse when a task involves setting limits on repeated or adversarial events that can invoke an agent workflow to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or c...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Safe Summary Claim Evidence AuditAUse when a task involves checking that a workflow summary distinguishes verified results from model-generated interpretation to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send exte...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Safe Output Write Scope AuditAUse when a task involves auditing the repository writes an agent workflow may perform after analysis to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change p...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Reusable Workflow Trust ReviewAUse when a task involves reviewing inherited authority and code when an agentic workflow calls a reusable workflow to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external write...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Pull Request Comment SanitizationAUse when a task involves reviewing how model-generated text is sanitized before posting to a pull request to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or cha...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Privileged Self Hosted Runner IsolationAUse when a task involves reviewing use of self-hosted runners for workflows that process untrusted agent context to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes,...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Multi Agent Fanout Capacity LimitAUse when a task involves setting bounded concurrency for agents dispatched by a GitHub workflow to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change produc...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Model Failure Safe Fallback ReviewAUse when a task involves defining workflow behavior when a model call is unavailable, refused, truncated, or malformed to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external w...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Log Output Secret RedactionAUse when a task involves checking workflow logs for prompts, tool outputs, or environment data that expose secrets to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external write...securityrustshellVotes: 0GitHub stars: 2
Gh Aw Instruction File Change ProtectionAUse when a task involves reviewing changes to repository instructions that control an agentic workflow to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Fork Pull Request IsolationAUse when a task involves reviewing isolation for agent workflows triggered by pull requests from forks to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Firewall Blocked Egress TriageAUse when a task involves diagnosing a blocked outbound request without weakening the workflow firewall to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Firewall Api Credential Isolation CheckAUse when a task involves checking that model-provider credentials remain outside the agent container when a proxy sidecar is used to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw External Write Target AllowlistAUse when a task involves limiting which repositories, issues, pull requests, and branches an agent workflow can modify to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external w...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Event Payload Provenance ReviewAUse when a task involves checking the source and trust level of values inserted from GitHub event payloads into an agent task to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send ext...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Deployment Environment Protection AuditAUse when a task involves checking approvals and environment protections for agent-generated deployment requests to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, ...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Credential Scope And Lifetime AuditAUse when a task involves auditing credential sources, permissions, exposure windows, and revocation for workflow agents to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external ...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Concurrency Group Cancellation AuditAUse when a task involves reviewing concurrency controls for overlapping agent workflow runs to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change production...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Comment And Label Mutation ApprovalAUse when a task involves setting approval conditions for automated comments or labels generated by an agentic workflow to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external w...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Checkout Ref Trust BoundaryAUse when a task involves reviewing which commit and files an agentic workflow checks out before using repository instructions to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send ext...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Audit Trail Event CorrelationAUse when a task involves correlating agent actions with the GitHub event, run, commit, model, and tool invocation that produced them to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, s...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Artifact Provenance And RetentionAUse when a task involves reviewing generated reports, patches, and logs uploaded by an agent workflow to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change ...securityrustrailsVotes: 0GitHub stars: 2
Gh Aw Agent Result Provenance HandoffAUse when a task involves preserving provenance when an agent analysis result is handed to another workflow job to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, o...securityrustrailsVotes: 0GitHub stars: 2