Overview

agentic-actions-auditor

CommunityLow risk

Claude CodeCodexgemini-cliMaTE

Toolsopenaianthropicgithubgitnodepythongo

Languagespythonrustgoruby

Frameworksexpress

Domainapisecurityaiagentsearch

Tasksreviewtestanalyzesearchdocument

Usage Guide

Auditing a repository's GitHub Actions workflows for AI agent security
Reviewing CI/CD configurations that invoke Claude Code Action, Gemini CLI, or OpenAI Codex
Checking whether attacker-controlled input can reach AI agent prompts
Evaluating agentic action configurations (sandbox settings, tool permissions, user allowlists)
Assessing trigger events that expose workflows to external input (pull_request_target, issue_comment, etc.)
Investigating data flow from GitHub event context through env: blocks to AI prompt fields

Analyzing workflows that do NOT use any AI agent actions (use general Actions security tools instead)
Reviewing standalone composite actions or reusable workflows outside of a caller workflow context (use this skill when analyzing a workflow that references them via uses:)
Performing runtime prompt injection testing (this is static analysis guidance, not exploitation)
Auditing non-GitHub CI/CD systems (Jenkins, GitLab CI, CircleCI)
Auto-fixing or modifying workflow files (this skill reports findings, does not modify files)

AI Skill Advisor

AI SKILL ADVISOR

Should you use this skill?

AI-powered evaluation of trust, security posture, quality signals, and fit for your use case. Grounded in the skill's actual data.

Trust & Security

Quality Scores

Trust95%

Freshness80%

Compatibility100%

Adoption0%

Metadata Quality40%

Popularity

Source

Compatibility & Dependencies

claude-code

inferrednpx-skills

codex

inferredagents-skills-dir

gemini-cli

inferredgemini-skills-dir

mate

inferrednpx-skills