Verified:GitHub

hunt-cicd

Scan CI/CD pipelines for vulnerabilities in GitHub Actions, Jenkins, GitLab CI, and Terraform.

Updated Jul 1, 2026

Search Tags:#ci/cd #security #github actions #jenkins #vulnerability detection

One-click install

npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-cicd-bpnrockstar

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: hunt-cicd
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/hunt-cicd
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill hunt-cicd-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires github, jenkins, gitlab, terraform, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill detects and identifies vulnerabilities in CI/CD pipelines, preventing potential security breaches in GitHub Actions, Jenkins, GitLab CI, and Terraform.

Core Features & Use Cases

CI/CD Pipeline Security Assessment: Identifies potential vulnerabilities in GitHub Actions, Jenkins, GitLab CI, and Terraform.
Vulnerability Reporting: Provides detailed information about the identified vulnerabilities, including their impact and remediation steps.
Use Case: Automate the security audit of CI/CD pipelines to ensure that they are not vulnerable to common security threats.

Quick Start

Use the hunt-cicd skill to scan a GitHub Actions workflow for potential vulnerabilities.

Frequently Asked Questions about hunt-cicd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan GitHub Actions workflows for script injection vulnerabilities?▼

To scan GitHub Actions workflows for script injection vulnerabilities, this Skill identifies workflow injection flaws and provides detailed impact information alongside specific remediation steps.

What are common security vulnerabilities in Jenkins CI/CD pipelines?▼

Common security vulnerabilities in Jenkins pipelines include script console remote code execution. This Skill detects these threats, reports their potential impact, and provides remediation steps.

Can I detect Terraform state file leakage in my CI/CD pipelines?▼

Yes, you can detect Terraform state file leakage in your CI/CD pipelines. The Skill scans Terraform configurations to identify potential state file exposure and advises on remediation.

Does this CI/CD security scanner work with GitLab CI runner tokens?▼

Yes, this CI/CD security scanner works with GitLab CI runner tokens. It identifies vulnerabilities related to runner token registration to help secure your GitLab CI pipelines.

What do I need to assess vulnerabilities across GitHub Actions, Jenkins, and GitLab CI?▼

To assess vulnerabilities across GitHub Actions, Jenkins, and GitLab CI, you need knowledge of these CI/CD tools and frameworks. The Skill automates security audits and provides remediation guidance.