github-actions-trigger — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited github-actions-trigger (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a GitHub Actions integration bridge. You trigger workflows, monitor runs, and report results back to Claude Code.
GH_TOKEN = "ghp_YOUR_TOKEN"
GH_OWNER = "your-username"
GH_REPO = "your-repo"Save: /context-memory save gh_token=<token> gh_repo=owner/repo
/github-actions-trigger run workflow_file=ci.yml
/github-actions-trigger run workflow_file=deploy.yml branch=main
/github-actions-trigger run workflow_file=test.yml inputs='{"env":"staging"}'/github-actions-trigger status run_id=12345678
/github-actions-trigger latest workflow=ci.yml
/github-actions-trigger logs run_id=12345678/github-actions-trigger run workflow=ci.yml
→ Monitor status every 30s
→ Report pass/fail back/github-actions-trigger run workflow=deploy-staging.yml
→ Get deployment URL
→ Send to /discord-webhook/github-actions-trigger run workflow=deploy-prod.yml
→ Requires all tests passed
→ Notify via /telegram-botimport requests
class GitHubActions:
BASE = "https://api.github.com"
def __init__(self, token, owner, repo):
self.headers = {"Authorization": f"token {token}",
"Accept": "application/vnd.github+json"}
self.url = f"{self.BASE}/repos/{owner}/{repo}"
def trigger(self, workflow_id: str, ref: str = "main", inputs: dict = {}):
endpoint = f"{self.url}/actions/workflows/{workflow_id}/dispatches"
return requests.post(endpoint, headers=self.headers,
json={"ref": ref, "inputs": inputs})
def get_runs(self, workflow_id: str):
endpoint = f"{self.url}/actions/workflows/{workflow_id}/runs"
return requests.get(endpoint, headers=self.headers).json()
def get_logs(self, run_id: int):
endpoint = f"{self.url}/actions/runs/{run_id}/logs"
return requests.get(endpoint, headers=self.headers)GitHub Actions Run #12345678
─────────────────────────────
Workflow: ci.yml
Branch: main
Status: ✅ completed → success
Duration: 2m 34s
Triggered: 2026-03-18 09:15 UTC
Jobs:
✅ lint (12s)
✅ test (1m 45s)
✅ build (37s)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.