{"agent":"claude","input":"Review the open pull request on this repository. Check it out, run actionlint with the repository's actionlint.yml, then npm ci and npm run all, and report any file npm run all changed, such as a stale dist/index.js. Read every workflow under .github/workflows and post one review that cites file and line for every finding, paying particular attention to workflow and job permissions, untrusted event data such as pull request titles, branch names or comment bodies used directly in run steps, pull_request_target with a checkout of the head, and third-party actions not pinned to a full commit SHA. Do not push commits.","resources":[{"url":"https://github.com/your-org/your-action/pull/123"}]}