agentic-actions-auditor - Audit AI Agent GitHub Actions Workflows
Audits GitHub Actions workflows for vulnerabilities in AI agent integrations and traces attacker-controlled input to CI/CD agents.
Tags
Updated: 2026-10-07Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Discover workflow files
- Identify AI action steps
- Resolve cross-file references
- Trace attacker-controlled input
- Assess security configurations
- Report security findings
Inputs
- Local workflow files
- GitHub repository URL or identifier
- Optional branch, tag, or SHA
Outputs
- Workflow analysis summary
- AI action inventory
- Security findings
Requirements
- GitHub Actions workflow files
- GitHub CLI for remote analysis
- Repository access for remote analysis