agentic-actions-auditor

agentic-actions-auditor is an open-source security skill for Claude Code, Codex, and Gemini CLI, published by sickn33. Its author describes it as: “Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled i…”. The project has 45k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add sickn33/agentic-awesome-skills`.

What agentic-actions-auditor does

Static security analysis guidance for GitHub Actions workflows that invoke AI coding agents. This skill teaches you how to discover workflow files locally or from remote GitHub repositories, identify AI action steps, follow cross-file references to composite actions and reusable workflows that may contain hidden AI agents, capture security-relevant configuration, and detect attack vectors where attacker-controlled input reaches an AI agent running in a CI/CD pipeline.

Installation

Add agentic-actions-auditor to your agent with:

/plugin marketplace add sickn33/agentic-awesome-skills

Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.

What's inside

The SKILL.md for agentic-actions-auditor is organised into these sections:

• When to Use
• When NOT to Use
• Rationalizations to Reject
• Audit Methodology
• Step 0: Determine Analysis Mode
• Step 1: Discover Workflow Files
• Step 2: Identify AI Action Steps
• Step 3: Capture Security Context
• Step 4: Analyze for Attack Vectors
• Step 5: Report Findings
• Detailed References
• Limitations

When to use it

Reach for agentic-actions-auditor when you want security help from Claude Code without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.

Strengths

• Clear MIT license — safe to read and adapt
• Ships in sickn33/agentic-awesome-skills, an established project with 45,044 GitHub stars
• Declares compatibility with Claude Code, Codex, Gemini CLI
• Actively maintained (recent commits)

Topics

Frequently asked questions

What does agentic-actions-auditor do?

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.

How do I install agentic-actions-auditor?

Run /plugin marketplace add sickn33/agentic-awesome-skills in your agent, then reload your skills. Review the source at https://github.com/sickn33/agentic-awesome-skills before installing.

Is agentic-actions-auditor free to use?

Yes. agentic-actions-auditor is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.

Which agents does agentic-actions-auditor work with?

agentic-actions-auditor declares compatibility with Claude Code, Codex, and Gemini CLI. Agent Skills use a portable SKILL.md format, so other compatible clients can usually load it too.

Where does agentic-actions-auditor come from?

agentic-actions-auditor ships inside sickn33/agentic-awesome-skills, a repository that contains 66 catalogued skills in total. The repository's 45,044 GitHub stars apply to that whole collection, not to this skill on its own.