Skip to main content
#39
Ranked #39 of 104 in this category· 该品类排名 #39 / 共 104 个

agentic actions auditor

by trailofbits·2mo ago

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gem…

Security & ComplianceClaude CodeMedium risk · 中风险open source · 开源

Before you install安装前须知

!Accesses the network会访问网络
Editor's verdict· 编辑结论

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including e…

— Editorial team · 编辑团队

Install via Skills CLI

Use npx skills add to install this skill into the selected agent. Phase 0 commands are generated from source rules, not verified.

Codex
npx skills add https://github.com/trailofbits/skills/blob/main/plugins/agentic-actions-auditor/skills/agentic-actions-auditor/SKILL.md -g -a codex -y

Drop `-g` to install project-locally

Best for适合什么场景

  • 深度研究
  • 资料检索
  • 趋势分析

Not for不适合什么场景

  • Workflows that require stronger human review than this catalog entry documents.需要比当前目录条目更严格人工复核的工作流。

vs alternativesvs 其他选择

Full compare table完整对比表 →

Side-by-side compare维度对比

Key differences with same-lane alternatives
this skill · 当前agentic actions auditorapi-security-testingaig-scannerwooyun-legacy
Rating · 评分
Stars · 星标5.1k3.7k3.6k1.6k
Risk · 风险Medium risk · 中风险Medium risk · 中风险Medium risk · 中风险Low risk · 低风险
Best for · 最适合深度研究API安全测试的专业技能和方法论A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via WooYun business logic vulnerability methodology — 22,132 real cases across 6 domains (authentication bypass, authorizati
Not for · 不适合Workflows that require stronger human review than this catalog entry documents.Workflows that require stronger human review than this catalog entry documents.Workflows that require stronger human review than this catalog entry documents.Workflows that require stronger human review than this catalog entry documents.

Audit notes审计备注

not individually audited · 未独立审计
Source源码open on GitHub · 公开
Author作者community · 社区!
Network网络访问not individually audited · 未独立审计!
Filesystem文件写入not individually audited · 未独立审计!
Dependencies依赖not individually audited · 未独立审计!
Telemetry遥测none · 无
Skill Market
Find the best AI skills for the job·按品类找最好用的 AI 技能
v0.4 · 1306 skills indexed · last review 2026-06-10