Overview
agentic-actions-auditor is an open-source security skill for Claude Code, Codex, and Gemini CLI, published by trailofbits. Its author describes it as: “Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled i…”. The project has 6.6k stars on GitHub and is available under the CC-BY-SA-4.0 license. Add it to your setup with `/plugin marketplace add trailofbits/skills`.
What agentic-actions-auditor does
Static security analysis guidance for GitHub Actions workflows that invoke AI coding agents. This skill teaches you how to discover workflow files locally or from remote GitHub repositories, identify AI action steps, follow cross-file references to composite actions and reusable workflows that may contain hidden AI agents, capture security-relevant configuration, and detect attack vectors where attacker-controlled input reaches an AI agent running in a CI/CD pipeline.
Best for
What’s inside
The SKILL.md for agentic-actions-auditor is organised into these sections:
- When to Use
- When NOT to Use
- Rationalizations to Reject
- Audit Methodology
- Step 0: Determine Analysis Mode
- Step 1: Discover Workflow Files
- Step 2: Identify AI Action Steps
- Step 3: Capture Security Context
- Step 4: Analyze for Attack Vectors
- Step 5: Report Findings
- Detailed References
Installation
Add agentic-actions-auditor to your agent with:
/plugin marketplace add trailofbits/skillsReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- Claude Code — named in the skill.md
- Codex — named in the skill.md
- Gemini CLI — named in the skill.md
License
agentic-actions-auditor is published under the CC-BY-SA-4.0 license.
Strengths
- Clear CC-BY-SA-4.0 license — safe to read and adapt within its terms
- Ships in trailofbits/skills, an established project with 6,646 GitHub stars
- Works with Claude Code, Codex, Gemini CLI
- Actively maintained — repository updated in the last 90 days
Author
Topics
Alternatives to agentic-actions-auditor
Similar skills from other repositories:
Frequently asked questions
- What does agentic-actions-auditor do?
- Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI/CD pipeline security for prompt injection risks, or evaluating agentic action configurations.
- How do I install agentic-actions-auditor?
- Run /plugin marketplace add trailofbits/skills in your agent, then reload your skills. Review the source at https://github.com/trailofbits/skills before installing.
- Is agentic-actions-auditor free to use?
- Yes. agentic-actions-auditor is free and open source under the CC-BY-SA-4.0 license, so you can read, run, and adapt it within that license's terms.
- Which agents does agentic-actions-auditor work with?
- agentic-actions-auditor lists Claude Code, Codex, and Gemini CLI — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does agentic-actions-auditor come from?
- agentic-actions-auditor ships inside trailofbits/skills, a repository that contains 41 catalogued skills in total. The repository's 6,646 GitHub stars apply to that whole collection, not to this skill on its own.