Actions Clinic — CI/CD review of your GitHub Actions workflow

Paste a GitHub Actions workflow and get a senior CI/CD engineer's review: a production-readiness posture, the workflow and job inventory, prioritized findings with corrected YAML fragments, quick wins and focus areas. A free instant prescan flags mutable action refs, missing permissions, script injection, secret leaks, missing timeouts and more. Derived from the @sickn33/github-workflow-automation skill.

Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.