← Browse
agentic-actions-auditor
trailofbits ★ 7875
This Claude Code plugin audits GitHub Actions workflows for security vulnerabilities in AI agent integrations like Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. It detects nine categories of attack vectors including environment variable injection, direct expression injection, PR target misconfigurations, and unsafe AI output evaluation in CI/CD pipelines.
Install
> /plugin marketplace add trailofbits/skills/tree/HEAD/plugins/agentic-actions-auditor
> /plugin install agentic-actions-auditor
Source: https://github.com/trailofbits/skills/tree/HEAD/plugins/agentic-actions-auditor
What it's made of
1 skill
- Commands
- 0
- Agents
- 0
- Skills
- 1
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (trailofbits).