Would you approve this workflow?

Situation

An AI-generated GitHub Actions workflow runs benchmarks when a team member comments `/benchmark` on a PR.

Environment

Public repository with external contributors. Self-hosted runners with repository access.

Select suspicious lines in the terminal to flag them before submitting your verdict.

pending review

name: Benchmark on demand

on:
  issue_comment:
    types: [created]

jobs:
  benchmark:
    if: github.event.issue.pull_request && contains(github.event.comment.body, '/benchmark')
    runs-on: self-hosted
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.issue.pull_request.head.ref }}
      - name: Run benchmark
        run: |
          echo "Running benchmark for ${{ github.event.comment.user.login }}"
          ./scripts/benchmark.sh ${{ github.event.comment.body }}