github-actions-reviewlisted

## Input - Workflow YAML and/or composite action YAML (`action.yml`) + PR context (required) ## Output Specification Return structured Markdown in accordance with [references/common-output-format.md](references/common-output-format.md). That file is the source of truth for the output contract. ## Execution Scope - Systematically apply review checklist from [references/common-checklist.md](references/common-checklist.md) - **Do not run github-actions-validation or execute actionlint/ghalint/zizmor** - Do not modify workflow files or approve/merge PRs ### USE FOR: - review workflow security and correctness after validation output is available - assess trigger design, permissions, and secrets handling with human judgment - review multi-workflow PRs for policy and maintainability risks ### DO NOT USE FOR: - execute syntax/security validators (`actionlint`, `ghalint`, `zizmor`) - auto-fix workflow YAML files - replace `github-actions-validation` for deterministic checks ## Reference Files Guide - [common-checklist.md](references/common-checklist.md) (always read) - [common-output-format.md](references/common-output-format.md) (always read) - [category-global.md](references/category-global.md) (always read) - [category-ordering.md](references/category-ordering.md) (always read) - [category-security.md](references/category-security.md) (always read) - [category-best-practices.md](references/category-best-practices.md) (always read) - [category-error-handling.md](reference