Home / Skills / agentic-actions-auditor
agentic-actions-auditor From the maker
trailofbits/skillsSkill
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI/CD pipeline security for prompt injection risks, or evaluating agentic action configurations.
Why this score
This repo hosts 10 skills, so its 7,649 stars are split between them (about 765 each) for scoring.
Popularity score: 78/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 5c99c03fb8a9, with Cisco's open-source skill-scanner.
What its code does:
- Downloads content and runs it Whatever it downloads can change after we scanned it.SKILL.md:107
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Prompts that use GitHub
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneagentic-actions-auditor trailofbits/skills · Skill | 78 | ★ 7.6k | ≈149 always | 16d ago |
| build-iterated-agentic-loop humanlayer/skills · Skill Also for GitHub | 76 | ★ 5.4k | ≈42 always | 27d ago |
| agentic-tool-integration samugit83/redamon · Skill Both about agentic and integration | 76 | ★ 3.2k | ≈25 always | 16d ago |
| subagent-auditor glittercowboy/taches-cc-resources · Subagent Both about auditor and evaluating | 63 | ★ 2.0k | ≈55 in chat | 7mo ago |
| awesome-agentic-patterns-pr-review nibzard/awesome-agentic-patterns · Skill Also for GitHub | 82 | ★ 5.0k | ≈113 always | 21d ago |
| github-actions callstackincubator/agent-skills · Skill Also for GitHub | 71 | ★ 1.7k | ≈62 always | 27d ago |