GitHub Agentic Workflows

Name: GitHub Agentic Workflows
Author: github

CSecurity

GitHub Agentic Workflows (`gh-aw`) is a GitHub CLI extension for writing Agentic Workflows in markdown and compiling them to GitHub Actions.

5,269 stars
0 votes
0 copies
2 views
Added September 1, 2026

ai-agentsbashgit

Works with

Security analysis

C71/100

criticalPipes output to a shell interpreter
mediumUses curl or wget to download content
criticalDownloads and executes remote scripts — classic supply chain attack

Pro scans all 21 files and shows the line behind each finding

Scanned September 1, 2026

npx -y skills add githubnext/gh-aw --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of GitHub Agentic Workflows?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for GitHub Agentic Workflows

[![Security: C — Skills Directory](https://www.skillsdirectory.com/api/skills/githubnext-github-agentic-workflows/badge)](https://www.skillsdirectory.com/skills/githubnext-github-agentic-workflows)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: GitHub Agentic Workflows
description: GitHub Agentic Workflows (`gh-aw`) is a GitHub CLI extension for writing Agentic Workflows in markdown and compiling them to GitHub Actions.
---
## Install
```bash
gh extension install github/gh-aw
```
If failed,
```
curl -sL https://raw.githubusercontent.com/github/gh-aw/main/install-gh-aw.sh | bash
```
## Load
Load https://github.com/github/gh-aw/blob/main/.github/skills/agentic-workflows/SKILL.md to learn how to create/update/debug/optimize Agentic Workflows.