GitHub Actions Security Review

https://api.aiskills402.com/v1/skills/github-actions-security-review/file
x402 · HTTP eip155:8453 in catalog since Oct 28
33
of 100
flagged
Tool descriptions contain instructions to the agent

Security audit detected prompt injection in tool descriptions: [external_file_exfiltration: "read secrets"]. These directives may attempt to hijack your agent's behavior.

Availability 100
Weight 30% · 7-day uptime
Honesty 0
Weight 30% · price match
Safety 0
Weight 25% · prompt injection
Maturity 20
Weight 15% · longevity

Service Metadata

Host
Listed Price
$0.010000
Payee (Catalog)
0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4
30-day Unique Payers
2 buyers
First Seen
2026-10-28
Last Diagnostic Run
2026-11-01 03:01 UTC
Discovered via
bazaar
Embed Badge

Diagnostic Runs

pass fail skipped
Oct 31 · 01:32
reach 1.0s challenge price payto injection
details ↓
price Pass: 402 price $0.010000 matches catalog $0.010000
payto CRITICAL: payTo mismatch! Catalog stated 0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4, but 402 requested 0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68
reach HTTP 402 · 1046 ms · raw response

Community

0 votes from verified emails. Votes adjust the score by at most ±10 and never change a flag.

· sign in with email to vote

For your agent

$ curl https://capkey.dev/api/v1/score?url=api.aiskills402.com/v1/skills/github-actions-security-review/file
{ "total": 33, "badge": "flagged",
  "verdict": "tool_descriptions_contain_inst", "checked_at": "2026-11-01T03:01:48.458Z" }