GitHub Actions Artifact Budget Audit

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 6:32 AM UTC
• Version: 1.0.0

Overview

This skill is a local GitHub Actions artifact size auditor, and its behavior matches that purpose without hidden persistence, destructive actions, or data exfiltration.

Install this as a local reporting aid. Keep ARTIFACT_GLOB pointed at intended GitHub artifact export files, and remember that reports may include repository names, workflow run IDs, and artifact download URLs from the input data, so avoid sharing output from private repositories broadly.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence

Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · fixtures/artifacts-repo-a.json (reported line 11)May include surrounding context.

json

"size_in_bytes": 146800640,
      "expired": false,
      "expires_at": "2030-01-09T10:00:00Z",
      "archive_download_url": "https://api.github.com/artifacts/9101/zip",
      "workflow_run": {"id": 2201}
    },
    {

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · fixtures/artifacts-repo-a.json (reported line 20)May include surrounding context.

json

"size_in_bytes": 146800640,
      "expired": false,
      "expires_at": "2030-01-09T10:00:00Z",
      "archive_download_url": "https://api.github.com/artifacts/9101/zip",
      "workflow_run": {"id": 2201}
    },
    {

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · fixtures/artifacts-repo-a.json (reported line 29)May include surrounding context.

json

"size_in_bytes": 146800640,
      "expired": false,
      "expires_at": "2030-01-09T10:00:00Z",
      "archive_download_url": "https://api.github.com/artifacts/9101/zip",
      "workflow_run": {"id": 2201}
    },
    {

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · fixtures/artifacts-repo-b.json (reported line 11)May include surrounding context.

json

"size_in_bytes": 146800640,
      "expired": false,
      "expires_at": "2030-01-09T10:00:00Z",
      "archive_download_url": "https://api.github.com/artifacts/9101/zip",
      "workflow_run": {"id": 2201}
    },
    {

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · fixtures/artifacts-repo-b.json (reported line 20)May include surrounding context.

json

"size_in_bytes": 146800640,
      "expired": false,
      "expires_at": "2030-01-09T10:00:00Z",
      "archive_download_url": "https://api.github.com/artifacts/9101/zip",
      "workflow_run": {"id": 2201}
    },
    {

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · fixtures/artifacts-repo-b.json (reported line 29)May include surrounding context.

json

"size_in_bytes": 146800640,
      "expired": false,
      "expires_at": "2030-01-09T10:00:00Z",
      "archive_download_url": "https://api.github.com/artifacts/9101/zip",
      "workflow_run": {"id": 2201}
    },
    {

Static analysis

No suspicious patterns detected.