{"slug":"gha-security-review","source_name":"gha-security-review","name":"Gha Security Review","description":"Find exploitable vulnerabilities in GitHub Actions workflows. Every finding MUST include a concrete exploitation scenario — if you can't build the attack, don't report it.","version":1,"lift":{"pass_rate_delta_pts":13.64,"pass_rate_pct":22.7,"total_cases":22,"passed_cases":5,"tokens_delta_pct":71.7,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T20:17:36.735874+00:00"},"skill_score":0.2273,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":13.64,"with_pass_pct":22.7,"without_pass_pct":9.1,"tokens_delta_pct":71.7,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-07-28T20:17:36.735874+00:00","run_id":"e8e0c8ef-9f2d-4dc3-b4e2-902aef0b4599","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"d968eae2ae8016db5ce1d3f61571925c62831a2cfb028c5012e14cb199d9d210","raw_url":"https://app.decimal.ai/s/gha-security-review/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/gha-security-review"}