skills.rest
anthril
anthrilOFFICIAL
Explore all skills by this author →
WebsiteGitHub

cicd-pipeline-audit

Audit CI/CD pipeline configs across six platforms for security and deploy-safety risks.

3|Updated Apr 1, 2026
Search Tags:#devops#ci/cd#release-management#github-actions#workflow-analysis#pipeline-security#ci-cd-audit
One-click install
npx skills add https://github.com/anthril/official-claude-plugins --skill cicd-pipeline-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cicd-pipeline-audit
Source: https://github.com/anthril/official-claude-plugins/tree/main/plugins/devops/skills/cicd-pipeline-audit
Command: npx skills add https://github.com/anthril/official-claude-plugins --skill cicd-pipeline-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Audit and harden CI/CD pipelines across multiple platforms to detect security, reliability, and deployment risks before they reach production.

Core Features & Use Cases

  • Cross-platform CI/CD audit across GitHub Actions, GitLab CI, CircleCI, Azure Pipelines, Jenkins, and Bitbucket.
  • Generates structured findings, pattern insights, and practical remediation guidance.
  • Supports static, live, apply, and runtime modes for flexible assessment.

Quick Start

Run the audit on your repository's workflows to generate a findings report.

Frequently Asked Questions about cicd-pipeline-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit CI/CD pipelines for security and deployment risks?▼

CI/CD pipeline audits detect security, reliability, and deployment risks by statically parsing workflow configs. Live mode fetches recent run data and repository permissions to surface real-world risk signals across workflows.

Does CI/CD pipeline security auditing work with GitLab CI and Azure Pipelines?▼

Yes, cross-platform CI/CD auditing supports GitHub Actions, GitLab CI, CircleCI, Azure Pipelines, Jenkins, and Bitbucket. It applies static analysis to workflow configs and fetches run data to surface risk signals across all these platforms.

How do I check GitHub Actions workflows for misconfigurations and unsafe deployments?▼

Run a static analysis audit on your GitHub Actions workflow configuration files. This surfaces security, reliability, and deploy-safety risks, returning a structured, machine-readable findings set with per-workflow details and cross-workflow patterns.

Can I fetch live repository permissions and recent run data during a pipeline audit?▼

Yes, in live mode, the CI/CD pipeline audit fetches recent run data and repository permissions to surface real-world risk signals. This complements static config parsing to provide deeper security, reliability, and reproducibility insights.

What is the best way to harden CI/CD workflows before they reach production?▼

Audit CI/CD workflows to detect security and deployment risks before production. This generates structured findings, cross-workflow pattern insights, and practical remediation guidance to harden pipeline reliability and deploy-safety.

Related Skills

Explore More Software Engineering Skills→
aaddrickaaddrick
5.3k

lint

Lint shell scripts with shellcheck and GitHub Actions workflows with actionlint.

Community
Basic
AITOBIAS04AITOBIAS04
3

auditing-security

Audit code, deployment, and sprint artifacts across five categories into SECURITY-AUDIT-REPORT.md and findings.jsonl.

Community
Advanced
icartshicartsh
4

code-analyze

Analyze .NET solutions for code quality, security, and dependency issues.

Community
Advanced
manuelbrandner85manuelbrandner85

agentic-actions-auditor

Audit GitHub Actions workflows for AI agent security vulnerabilities and prompt injection risks.

Community
Advanced