{"enrichment":{"faq":[{"a":"Workflow Audit systematically reviews `.github/workflows/*.yml` files against security hardening, action version currency, and reliability standards. It discovers all workflow files, validates YAML syntax, runs a comprehensive checklist covering permissions, script injection, timeouts, and cross-workflow consistency, then reports findings sorted by severity with concrete fixes for each issue.","q":"What does Workflow Audit do?"},{"a":"Yes. Workflow Audit tracks workflow modifications by discovering all workflow files and validating changes against security and reliability standards. It monitors permissions, script injection risks, timeouts, and cross-workflow consistency to ensure modifications maintain compliance and security posture.","q":"Can Workflow Audit track workflow modifications?"},{"a":"Workflow Audit monitors workflow execution by reviewing execution logs and activity patterns within `.github/workflows/*.yml` files. It validates YAML syntax, checks action version currency, and ensures timeouts and reliability standards are met across all discovered workflow files.","q":"How does Workflow Audit monitor workflow execution?"},{"a":"Workflow Audit provides comprehensive audit logs by validating all workflow files against a checklist covering permissions, script injection, timeouts, and cross-workflow consistency. Findings are reported sorted by severity with concrete fixes for each identified issue.","q":"What audit logs for workflows does Workflow Audit provide?"},{"a":"Yes. Workflow Audit generates audit reports by systematically reviewing all discovered workflow files and reporting findings sorted by severity. Each report includes concrete fixes and covers security hardening, action version currency, and reliability standards.","q":"Can Workflow Audit generate audit reports?"},{"a":"Workflow Audit is licensed under the ISC license, which permits free use, modification, and distribution with minimal restrictions.","q":"What is the license for Workflow Audit?"}],"shadow_tags":["compliance-tracking","execution-monitoring","change-history","activity-logging","process-transparency","audit-trail","workflow-inspection"],"summary_rewrite":"Workflow Audit systematically reviews `.github/workflows/*.yml` files against security hardening, action version currency, and reliability standards. It discovers all workflow files, validates YAML syntax, runs a comprehensive checklist covering permissions, script injection, timeouts, and cross-workflow consistency, then reports findings sorted by severity with concrete fixes for each issue."},"gist":{"api_url":"https://skillfed.io/api/skills/xiaolai/vmark/workflow-audit.json","as_of":"2026-07-27","description":"Workflow Audit checks GitHub Actions workflows for security, reliability, and best-practice compliance. npx skillfed install xiaolai/vmark/workflow-audit","install":{"manual":["git clone https://github.com/xiaolai/vmark","cp -r vmark ~/.claude/skills/workflow-audit"],"primary":"npx skillfed install xiaolai/vmark/workflow-audit","version":"18e33ac5"},"kind":"skill","mirror_url":"https://skillfed.io/xiaolai/vmark/workflow-audit.md","similar":[{"id":"DaleStudy/skills/github-actions","name":"github-actions","publisher":"DaleStudy/skills","url":"https://skillfed.io/DaleStudy/skills/github-actions"},{"id":"manutej/luxor-claude-marketplace/ci-cd-pipeline-patterns","name":"Ci Cd Pipeline Patterns","publisher":"manutej/luxor-claude-marketplace","url":"https://skillfed.io/manutej/luxor-claude-marketplace/ci-cd-pipeline-patterns"}],"title":"Workflow Audit by xiaolai: Track and audit workflow execution history and changes \u2014 SkillFed","use":{"when":["Yes.","Workflow Audit monitors workflow execution by reviewing execution logs and activity patterns within `.github/workflows/*.yml` files."]},"what":{"lead":"Workflow Audit checks GitHub Actions workflows for security, reliability, and best-practice compliance.","rest":"Workflow Audit systematically reviews `.github/workflows/*.yml` files against security hardening, action version currency, and reliability standards. It discovers all workflow files, validates YAML syntax, runs a comprehensive checklist covering permissions, script injection, timeouts, and cross-workflow consistency, then reports findings sorted by severity with concrete fixes for each issue."}},"id":"xiaolai/vmark/workflow-audit","install":{"mode":"external","repo":"https://github.com/xiaolai/vmark"},"links":{"html":"https://skillfed.io/xiaolai/vmark/workflow-audit","md":"https://skillfed.io/xiaolai/vmark/workflow-audit.md","repo":"https://github.com/xiaolai/vmark"},"meta":{"agents_supported":["claude-code"],"first_seen":"2026-07-28","forks":68,"language":"TypeScript","last_updated":"2026-07-27","license":"ISC","name":"Workflow Audit","publisher":"xiaolai","stars":424},"relations":{"similar":[{"id":"DaleStudy/skills/github-actions"},{"id":"JosiahSiegel/claude-plugin-marketplace/github-actions-2025"},{"id":"wshaddix/dotnet-skills/dotnet-gha-deploy"},{"id":"akin-ozer/cc-devops-skills/github-actions-validator"},{"id":"Aradotso/data-skills/infrastructure-cicd-data-engineering"},{"id":"manutej/luxor-claude-marketplace/ci-cd-pipeline-patterns"},{"id":"xiaolai/vmark/react-app-dev"},{"id":"datadog-labs/agent-skills/dd-browser-sdk"},{"id":"dawiddutoit/custom-claude/uv-ci-cd-integration"},{"id":"wshaddix/dotnet-skills/dotnet-ci-benchmarking"}]},"slug":{"owner":"xiaolai","repo":"vmark","skill":"workflow-audit"},"version":"18e33ac5"}