Security audit

CI-CD

Security checks for vulnerabilities and agentic risk

Overview

The skill is documentation-only and relevant to CI/CD, but its reusable workflow examples include unsafe deployment patterns that merit review before installation.

Review and harden any workflow before copying it into a repository. In particular, pin third-party actions to reviewed commits, avoid exposing secrets to pull-request jobs, add minimal permissions and environment approvals, restrict deployment keys and sudo rights, and confirm whether Docker images or mobile artifacts will be published automatically.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (4)

T08 · Insecure Dependencies

Warning

Location: mobile.md:13
Finding: Unpinned Fastlane Installation Exposes the Build Environment to Supply-Chain Risk
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: mobile.md:91
Finding: Flutter CI Action Is Referenced Through a Mutable Version Tag
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Error

Location: web.md:96
Finding: Mutable Third-Party Deployment Actions Receive Production SSH Credentials
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: web.md:57
Finding: Pull-Request Branch Name Is Interpolated Directly into Shell Source
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (4)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger list contains broad, common phrases such as 'build failing' and 'deploy automatically' that can match many ordinary developer conversations. This increases the chance of unintended skill activation, which can cause the agent to apply CI/CD-specific guidance in the wrong context or too eagerly in adjacent tasks.
Content: No source excerpt is available for this finding.

Autonomous Decision Making

Medium

Category: Excessive Agency
Confidence: 85% confidence
Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Content: Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.
md
| Stack | Recommended | Why | |-------|-------------|-----| | Web (Next.js, Nuxt, static) | Vercel, Netlify | Zero-config, auto-deploys, preview URLs | | Mobile (iOS/Android/Flutter) | Codemagic, Bitrise + Fastlane | Pre-configured signing, app store upload | | Backend/Docker | GitHub Actions, GitLab CI | Full control, self-hosted runners option | | Monorepo | Nx/Turborepo + GHA | Affected detection, build caching |

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The Docker template includes an authenticated login and unconditionally pushes built images to a remote registry on pushes to main, but does not clearly warn users that it will publish artifacts externally using repository-scoped credentials. In a copy-paste template skill, that omission can cause accidental public or organizational image publication, potentially exposing proprietary code, configuration, or sensitive build outputs.
Content: No source excerpt is available for this finding.

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · web.md (reported line 113)May include surrounding context.
host: ${{ secrets.SSH_HOST }} username: ${{ secrets.SSH_USER }} key: ${{ secrets.SSH_KEY }} script: sudo systemctl restart myapp

text
## Common Issues

Static analysis

No suspicious patterns detected.