agentic-actions-auditor - Audit GitHub Actions workflows for AI agent risks
Statically analyzes GitHub Actions workflows for security vulnerabilities in AI agent integrations and reports attack vectors involving external input.
Tags
Updated: 2026-10-07Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Discover workflow files
- Identify AI action steps
- Resolve local references
- Capture security configuration
- Trace external input flows
- Detect attack vectors
- Report audit findings
Inputs
- Local workflow files
- GitHub repository URL
- Repository owner and name
- Repository reference
- GitHub authentication
Outputs
- Audit findings
- Workflow analysis summary
- Detected AI action instances
- Security risk reports
Requirements
- GitHub Actions workflows
- GitHub CLI for remote analysis
- Repository access permissions