cyber-securing-github-actions-workflows

name	cyber-securing-github-actions-workflows
description	This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets from exfiltration, preventing script injection in workflow expressions, and implementing required reviewers for workflow changes.
hide	true

YURI skill adapter

Authoritative source: .claude/skills/cyber-securing-github-actions-workflows/SKILL.md

Authoritative source SHA-256: 3ce735bcf423b65158a9e19ac8c14a04c2c0520d8e5be19a34d15e79816b74d2

Source class: cyber-armed

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run node _SYSTEM/Scripts/skill-recall.mjs --show cyber-securing-github-actions-workflows and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.