Home / Skills / offensive-cicd-secrets
offensive-cicd-secrets
Comprehensive secrets extraction methodology targeting CI/CD environments across all major platforms. Covers environment variable extraction from build contexts, exploitation of vault and secrets-manager misconfigurations (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager), runner and agent token abuse for lateral movement, OIDC federation attacks exploiting trust relationships between CI/CD providers and cloud platforms, build log leakage analysis for inadvertently exposed credentials, cache poisoning techniques for credential exfiltration, platform-specific credential
Why this score
This repo hosts 10 skills, so its 7,620 stars are split between them (about 762 each) for scoring.
Popularity score: 79/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit a8de813edc9f, with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.SKILL.md:124 and 2 more
- Runs shell commands Common for dev tools. Read the commands it runs.SKILL.md:2 and 2 more
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneoffensive-cicd-secrets SnailSploit/Claude-Red · Skill | 79 | ★ 7.6k | ≈156 always | 23d ago |
| cicd-supply-chain hypnguyen1209/offensive-claude · Skill Both about cicd and oidc | 60 | ★ 394 | ≈65 always | 1mo ago |
| google-cicd-pipeline-design gemini-cli-extensions/cicd · Skill Both about cicd and gcp | 60 | ★ 51 | ≈84 always | 17d ago |
| cicd-redteam 0xSteph/pentest-ai-agents · Subagent Both about cicd | 64 | ★ 2.4k | ≈22 in chat | 29d ago |
| cicd-automation-terraform-specialist wshobson/agents · Subagent Both about cicd and cd | 80 | ★ 41k | ≈111 in chat | 16d ago |
| oxideterm-secret-zeroize AnalyseDeCircuit/oxideterm · Skill Both about secret and credential | 73 | ★ 1.7k | ≈61 always | 16d ago |