ci-cd-security
Agent skill from superagent-ai/skills.
What it does
- Privileged = has secrets, write permissions, or produces a sensitive artifact (release, deploy, comment, label).
- workflowrun — P0. Same problem as pullrequesttarget but indirect, via a chained pullrequest workflow's artifacts or metadata.
- push with broad wildcards (branches: [''] or no branch filter) — P2. An attacker who lands a PR can fire a privileged workflow by pushing a follow-up branch.
- permissions: write-all anywhere — P1.
- Job-level permissions: granting more than the job clearly needs — P2. e.g. contents: write on a job that only runs tests. Recommend least privilege.
- Combined with a dangerous trigger from Pass 1 — escalate severity by one level.
- Pinned to a tag (uses: actions/checkout@v4, @v4.1.1) — P1. Tags are mutable; an attacker who compromises the action repo can force-push the tag.
Requirements & configuration
- Job-level permissions: granting more than the job clearly needs — P2. e.g. contents: write on a job that only runs tests. Recommend least privilege.
- persist-credentials: true (default) on workflows that don't need to push back — P2. Recommend persist-credentials: false unless the workflow explicitly needs the embedded token.
- P1 — exploitable with one extra step (e.g. requires combining with another finding, or requires a maintainer mistake). Block merge if found on a release path.
- 3. Recommend the user check the items in references/checklist.md under "Per repository" and "Per organization" — those need GitHub settings access, not workflow YAML.
Configuration: GITHUB_TOKENBRANCHGITHUB_ENVGITHUB_OUTPUTTITLE
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
Source
Repository: https://github.com/superagent-ai/skills
ci-cd-security FAQ
What does the ci-cd-security skill do?
Scan GitHub Actions workflow files for security vulnerabilities by reading the YAML and reporting findings directly — no external tools, no installation, no shell execution. Use this skill whenever the user shares a `.github/workflows/` file, pastes workflow YAML, asks for a CI/CD security review, mentions `pull_request_target`, `workflow_run`, action pinning, `GITHUB_TOKEN` permissions, pwn requests, template injection, cache poisoning, secret exfiltration, supply chain risk, or any GitHub Actions hardening topic. Also trigger when the user is hardening an OSS repo, doing a CI/CD red team assessment, evaluating a target for supply-chain scanning, or writing publicly about CI/CD security. Bias toward triggering this skill rather than answering from memory — CI/CD security defaults are wrong almost everywhere and the rules are unintuitive. Privileged = has secrets, write permissions, or produces a sensitive artifact (release, deploy, comment, label). workflowrun — P0. Same problem as pullrequesttarget but indirect, via a chained pullrequest workflow's artifacts or metadata.
What does ci-cd-security require?
Job-level permissions: granting more than the job clearly needs — P2. e.g. contents: write on a job that only runs tests. Recommend least privilege. persist-credentials: true (default) on workflows that don't need to push back — P2. Recommend persist-credentials: false unless the workflow explicitly needs the embedded token. P1 — exploitable with one extra step (e.g. requires combining with another finding, or requires a maintainer mistake). Block merge if found on a release path. 3. Recommend the user check the items in references/checklist.md under "Per repository" and "Per organization" — those need GitHub settings access, not workflow YAML. Configuration keys: GITHUB_TOKEN, BRANCH, GITHUB_ENV, GITHUB_OUTPUT, TITLE.
How do I install ci-cd-security?
Run: npx -y skills add https://github.com/superagent-ai/skills --skill ci-cd-security --agent claude-code — the source lives at github.com/superagent-ai/skills.
Maintain ci-cd-security?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[ci-cd-security on getagentictools](https://getagentictools.com/skills/superagent-ai-skills-ci-cd-security?ref=badge) npx agentictools info skills/superagent-ai-skills-ci-cd-security The second line is the CLI lookup for this page — handy in READMEs and docs.
