Lightlines
By trailofbits

agentic-actions-auditor

trailofbits6.3k installs

Catch prompt injection risks in GitHub Actions.

What it does

Audits AI-enabled GitHub Actions workflows and produces actionable security findings with evidence, attack paths, and remediation.

When to use it

Use when reviewing GitHub Actions workflows that invoke AI agents, checking prompt injection paths, or assessing security-sensitive configurations and triggers.

How to use it

Give it a local repository or a GitHub repository URL; it returns a structured security findings report without modifying workflows.

What you provide

  • An existing project

Uses

Latest review

What you need · 0

No setup requirements listed.


Access · 1

This skill

GitHub

Read

Fetches workflows from GitHub