Consent request: lightweight AI workflow safety review

Hi, I maintain `agentic-actions-guard`, a small OSS scanner for AI-agent GitHub Actions workflow risks.

Your project directly matches the AI issue triage use case I’m focused on. Would you be open to receiving a lightweight review of public workflow safety patterns around untrusted issue text, token permissions, and secrets exposure?

Scope is public workflow files only. I do not need secrets, private prompts, or private repository content, and I will not post repo-specific findings unless a maintainer opts in.

Project: https://github.com/sho-tado/agentic-actions-guard
Public call: https://github.com/sho-tado/agentic-actions-guard/issues/4