{"slug":"github-actions-security-review-33fa3523","name":"GitHub Actions Security Review","summary":"GitHub Actions Security Review — Reviews ONE GitHub Actions workflow file (YAML) for the five mistakes that let an outsider run code or read secrets in your pipeline, and lists only those, one line each with a fixed code, the place, why it is dangerous and the fix - or exactly No findings. It catches text from an issue, pull request, comment or branch name pasted straight into a shell step, a pull_request_target or workflow_run job that checks out and runs the code of the pull request, a third-…","status":"live","headings":[{"slug":"code","title":"Code & developer tools"}],"indexable":true,"listed_since":"2026-10-25T17:52:13.721731Z","sources":[{"source":"x402_bazaar","external_id":"https://api.aiskills402.com/v1/skills/github-actions-security-review/file","owner_address":"0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68","seen_at":"2026-11-10T10:13:17.346200Z","removed_at":null}],"endpoints":[{"url":"https://api.aiskills402.com/v1/skills/github-actions-security-review/file","host":"api.aiskills402.com","protocol":"x402","state":"live","last_probe_at":"2026-11-10T18:27:03.833010Z","last_ok_at":"2026-11-10T18:27:03.833010Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"api-aiskills402-com-62d86cc3","name":"api.aiskills402.com"}],"payment_options":[{"endpoint_url":"https://api.aiskills402.com/v1/skills/github-actions-security-review/file","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"10000","pay_to":"0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68","observed_at":"2026-11-10T18:27:03.833010Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":2,"paid_calls_30d":3,"last_paid_at":"2026-11-03T03:04:22.745Z","reported_at":"2026-11-10T10:13:17.346200Z"},"assessment":{"method":"2026.11.3","checks":[{"id":"answers","state":"pass","reason":"Answered a check 6 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 16 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"2 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-11-11T00:30:19.539901Z"},"identity":{"endpoint_domains":["aiskills402.com"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}