Agentic Workflow Audit Report - 2026-02-22

[github-actions[bot]]

Audit Summary

• Period: Last 24 hours (2026-02-22)
• Runs Analyzed: 19 (18 completed, 1 in-progress)
• Workflows Active: 15 unique workflows
• Success Rate: 72.2% (13/18 completed runs)
• Issues Found: 7 (5 errors, 2 missing tools)
• Total Cost: $3.94 | Total Tokens: 24.3M | Total Turns: 75

---

Critical Errors

Root Cause: Lockdown mode with no custom GitHub token — 5 failures across 2 workflows

All 5 failures share the same root cause: workflows running with lockdown: true do not have the GH_AW_GITHUB_TOKEN secret configured. A secondary error (Artifact not found for name: agent-output) cascades from the primary failure.

Workflow	Failures	Run IDs
Issue Monster	4	#1993, #1992, #1991, #1990
Daily Issues Report Generator	1	#112

Recommendation: Configure the GH_AW_GITHUB_TOKEN repository/organization secret for workflows using lockdown: true.

---

Missing Tools

Tool	Request Count	Workflow Affected	Reason
GitHub MCP tools (list_issues, get_repository)	1	GitHub Remote MCP Authentication Test	MCP toolsets unavailable in runner — tools not loaded
Playwright browser network access	1	Multi-Device Docs Tester	Network sandbox blocked all URLs (ERR_CONNECTION_REFUSED, ERR_BLOCKED_BY_CLIENT)

Notes:

• The GitHub Remote MCP Authentication Test failure may be by design — the workflow is likely testing authentication failure scenarios.
• The Multi-Device Docs Tester requires network access for live Playwright viewport testing, which is blocked by the network firewall sandbox.

---

MCP Server Failures

No MCP server failures detected in this period. ✅

---

Firewall Analysis

• Total Requests: 873 | Allowed: 506 | Blocked: 367

Allowed Domains

Domain	Notes
api.anthropic.com:443	Claude API
api.github.com:443	GitHub API
api.githubcopilot.com:443	Copilot API
api.openai.com:443	OpenAI API
github.com:443	GitHub
pkg.go.dev:443, proxy.golang.org:443	Go package registry
raw.githubusercontent.com:443	GitHub raw content
registry.npmjs.org:443	NPM registry

Blocked Domains

Domain	Request Count	Workflow	Notes
- (unresolved)	360	Multiple	Likely DNS resolution failures or unconfigured destinations
storage.googleapis.com:443	7	GPL Dependency Cleaner	Google Cloud Storage — outside allowed list

---

Performance Metrics

• Total Token Usage: 24,336,758
• Total Cost (24h): $3.94
• Average Turns per Run: ~4.2
• Total Duration: ~1.2h

Per-Workflow Token & Cost Breakdown

See token/cost chart below for visual breakdown. High-usage workflows are expected given the nature of multi-step agentic tasks.

---

Trend Charts

Workflow Health — Last 24 Hours

The 72.2% success rate is dragged down by 4 consecutive Issue Monster failures all sharing the same lockdown token misconfiguration. Excluding that workflow, the remaining workflows ran at ~100% success. The pattern indicates a configuration issue rather than a systemic problem.

Token Usage & Cost — Last 24 Hours

Total 24-hour spend is $3.94 across 19 workflow runs. Cost is distributed across multiple workflows with no single outlier dominating. The 24.3M token total reflects normal operation for multi-step agentic tasks.

---

Affected Workflows Summary

Workflow	Status	Issue
Issue Monster	❌ Failed (4x)	Lockdown mode: missing GH_AW_GITHUB_TOKEN
Daily Issues Report Generator	❌ Failed	Lockdown mode: missing GH_AW_GITHUB_TOKEN
GitHub Remote MCP Authentication Test	⚠️ Missing tools	MCP tools not loaded in runner
Multi-Device Docs Tester	⚠️ Missing tools	Network sandbox blocks Playwright
All other workflows (11)	✅ Success	—

---

Recommendations

1. Configure GH_AW_GITHUB_TOKEN for workflows using lockdown: true — this is the root cause of all 5 failures today. Set the secret at the repository or organization level.
2. Review Multi-Device Docs Tester — determine if the workflow needs network firewall exceptions for Playwright to run live viewport tests, or update it to use static/mocked URLs.
3. Investigate unresolved firewall requests — 360 blocked requests with destination - may indicate workflows attempting to reach unconfigured or DNS-failing endpoints; trace which workflows generate these.
4. Monitor Issue Monster — 4 consecutive failures suggest this workflow will continue to fail until the token is configured; consider disabling or fixing before the next scheduled run.

---

Historical Context

Note: This is the first audit run. No historical baseline data is available for comparison. Future audits will be able to compare against this baseline.

Repo memory initialized with patterns detected in this run at audits/2026-02-22.json and patterns/{errors,missing-tools}.json.

---

Next Steps

• Configure GH_AW_GITHUB_TOKEN secret for lockdown-mode workflows
• Investigate Multi-Device Docs Tester network requirements
• Trace source of 360 unresolved firewall-blocked requests
• Disable or fix Issue Monster until token is configured

References:

• §22271364046 — This audit run
• §22270879317 — Issue Monster (latest failure)
• §22268460982 — Daily Issues Report Generator (failure)

AI generated by Agentic Workflow Audit Agent

• expires on Mar 1, 2026, 5:54 AM UTC