agentic-actions-auditor
agentic actions auditor
What it does
- Auditing a repository's GitHub Actions workflows for AI agent security
- Reviewing CI/CD configurations that invoke Claude Code Action, Gemini CLI, or OpenAI Codex
- Checking whether attacker-controlled input can reach AI agent prompts
- Evaluating agentic action configurations (sandbox settings, tool permissions, user allowlists)
- Assessing trigger events that expose workflows to external input (pullrequesttarget, issuecomment, etc.)
- Investigating data flow from GitHub event context through env: blocks to AI prompt fields
- Analyzing workflows that do NOT use any AI agent actions (use general Actions security tools instead)
Requirements & configuration
- 404 error: Report: "Repository not found or private. Check the name and your token permissions."
- Match step-level uses: within jobs.<jobid>.steps[] for AI action identification. Also note any job-level uses: -- those are reusable workflow calls that need cross-file resolution.
- token -- GitHub token with model access (check scope)
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
agentic-actions-auditor FAQ
What does the agentic-actions-auditor skill do?
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI/CD pipeline security for prompt injection risks, or evaluating agentic action configurations. Auditing a repository's GitHub Actions workflows for AI agent security Reviewing CI/CD configurations that invoke Claude Code Action, Gemini CLI, or OpenAI Codex
What does agentic-actions-auditor require?
404 error: Report: "Repository not found or private. Check the name and your token permissions." Match step-level uses: within jobs.<jobid>.steps[] for AI action identification. Also note any job-level uses: -- those are reusable workflow calls that need cross-file resolution. token -- GitHub token with model access (check scope)
How do I install agentic-actions-auditor?
Run: npx -y skills add https://github.com/trailofbits/skills --skill agentic-actions-auditor --agent claude-code — the source lives at github.com/trailofbits/skills.
Maintain agentic-actions-auditor?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[agentic-actions-auditor on getagentictools](https://getagentictools.com/skills/trailofbits-skills-agentic-actions-auditor?ref=badge) npx agentictools info skills/trailofbits-skills-agentic-actions-auditor The second line is the CLI lookup for this page — handy in READMEs and docs.
