sukria/gha_audit
koan/skills/core/gha_audit/SKILL.md
Scan GitHub Actions workflows for security vulnerabilities
$ install --global
skillsauthnpx skillsauth add sukria/koan gha_auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 17, 2026, 4:30 AM134.1s2 files scanned
SKILL.md
- name:
- gha_audit
- scope:
- core
- group:
- system
- emoji:
- ⚙️
- description:
- Audit GitHub Actions workflows for security issues
- version:
- 1.0.0
- audience:
- bridge
- - name:
- gha_audit
- usage:
- /gha_audit [project-name]
- aliases:
- [gha]
- handler:
- handler.py
- worker:
- false
Related Skills
sukria/reset
tools
VerifiedTrustedCommunity
Reset the run counter to zero without restarting
35SKILL.mdUpdated Jun 6, 2026
sukria/deep
tools
VerifiedTrustedCommunity
Launch an on-demand deep exploration session for a project
35SKILL.mdUpdated Jun 6, 2026
sukria/explain
data-ai
VerifiedTrustedCommunity
Explain a PR's intent and changes in plain language (ex: /explain https://github.com/owner/repo/pull/42)
35SKILL.mdUpdated Jun 5, 2026
sukria/autoreview
tools
VerifiedTrustedCommunity
Toggle automatic review+rebase after PR creation per project
35SKILL.mdUpdated Jun 5, 2026