Home › Agent skills › GitHub Actions Security Review
Security & Compliance

GitHub Actions Security Review skill

Audits GitHub Actions workflows for vulnerabilities an attacker could exploit through CI.

Run it in AGNT — freeView on GitHub

Why it matters

CI pipelines hold deploy keys and tokens, and workflow files are easy to get subtly wrong. Written and used by Sentry's own engineering team.

How to install GitHub Actions Security Review

  1. With the skills CLI. One command copies the skill into your project:
    npx skills add getsentry/skills --skill gha-security-review
  2. In Claude Code, by hand. Copy the gha-security-review folder from the repository into .claude/skills/ in your project, or into ~/.claude/skills/ to use it everywhere.
  3. In AGNT. Download AGNT free, then add the skill folder from Skills → Import. It runs with the model you choose, next to your agents, workflows and memory.

Source and maintenance

Repositorygetsentry/skills
Skill foldergha-security-review
GitHub stars (13 November 2026)1,166
Last commit5 Nov 2026
CategorySecurity & Compliance
Ranked#52 in The 100 Best AI Agent Skills in 2027

Checked against GitHub on 13 November 2026.

The AGNT briefing

Stay in the loop.

New agents, workflows and field notes. Sign up for AGNT updates.

By subscribing, you agree to receive AGNT updates. Unsubscribe any time. Privacy policy.