Open source alternatives to github-actions-hardening
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Launchgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Launchopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Launchandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Launchmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Launchod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Launchgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
About github-actions-hardening
github-actions-hardening
Security hardening reviewer for GitHub Actions workflow files
github-actions-hardening is an agent skill from the github/awesome-copilot collection that reviews GitHub Actions workflow files for security weaknesses. It focuses on the threat model specific to Actions rather than the application code a general scanner checks. Its premise is that most workflow risks are invisible to language linters, because the dangerous part is the YAML itself and the way GitHub expands expressions into a shell before a script runs. The review looks at where trust boundaries sit in the different trigger types, what permissions the workflow token has and whether they are scoped down, and whether untrusted input, such as a pull request title or branch name, is interpolated into a shell command where it could inject commands. It applies to workflow files under .github/workflows and to requests about securing CI. The output points to the specific lines and explains how each risk could be exploited, along with a hardened alternative. It is useful for maintainers of repositories that accept contributions from outside, because workflows triggered by outside pull requests are a common route to leaked secrets. A review is not a guarantee, so the team should test the changed workflows and rotate any secret that may have been exposed. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 1.9K installs and passing results from three security audits at the time of the scan.
- Price
- Free
- Made by
- github
- Category
- AI Skills
- Website
- github.com/github/awesome-copilot/github-actions-hardening