agentic-actions-auditor - Audit AI agent security in GitHub Actions
Audits GitHub Actions workflows for vulnerabilities in AI agent integrations and traces attacker-controlled input reaching CI/CD agents.
Tags
Updated: 2026-10-07Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Discover workflow files
- Identify AI action steps
- Resolve referenced workflows
- Capture security configurations
- Trace attacker-controlled input
- Detect attack vectors
- Report audit findings
Inputs
- GitHub Actions workflow files
- Local repository
- GitHub repository URL
- Owner/repository identifier
- Repository ref
Outputs
- Workflow inventory
- AI action inventory
- Security findings
- Attack vector analysis
- Unresolved reference report
- Audit status report
Requirements
- Access to local repository files
- gh CLI for remote analysis
- GitHub authentication for private repositories
- Token permissions to read repository contents