The Agent Skills Directory

[SAFE]: The skill serves as a developer guide for authoring GitHub Actions scripts and includes robust best practices for secure implementation.
[SAFE]: The documentation specifically addresses security risks, correctly advising against using inline GitHub expressions (${{ ... }}) within script bodies to prevent injection vulnerabilities.
[SAFE]: External dependencies defined in the asset files are restricted to official GitHub Action repositories and standard development tools.
[SAFE]: Command execution via the exec helper in the version-check scripts is limited to the uv tool with controlled arguments, intended only for package version validation.

github-script