[skill-activity] workshop: fix content issues in security and runner infrastructure side quests

[github-actions]

What was improved

Two low-scoring security/infrastructure side quests had content correctness issues:

side-quest-17-07-repo-poisoning.md (Part 2 lowest-scoring file, 5.45/10):
The attack scenario example contained nested triple-backtick fences inside an outer code block. This is invalid Markdown that would break rendering for learners — the attacker payload example was invisible or malformed. Replaced with clear prose that conveys the same information without the rendering bug.

side-quest-24-01-runner-infrastructure.md (Part 2, 6.13/10):
The network isolation section used network.allowed as the frontmatter field name, but the correct gh-aw field is network.allowed-domains. A learner copying this example would get a silent misconfiguration with no network restriction applied. Fixed field name and updated the checkpoint item.

Learner pain point addressed

• Broken Markdown rendering in a security-critical page would confuse learners trying to understand prompt injection attacks.
• Incorrect frontmatter syntax would cause enterprise learners configuring self-hosted runners to believe their network restrictions are in place when they are not.

Why it helps workshop flow

Both fixes prevent learners from hitting silent failures. The security page now clearly describes the attack, and the runner infrastructure page provides copy-pasteable frontmatter that actually works.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🧩 Workshop Skill Activity Author · 52.9 AIC · ⌖ 6.29 AIC · ⊞ 5.1K · ◷

• expires on Aug 18, 2026, 5:03 AM UTC

[github-actions]

This pull request was automatically closed because it expired on 2026-08-18T05:03:40.196Z.

Closed by Workflow