hunt-cicd

Detect and analyze vulnerabilities in CI/CD pipelines across GitHub Actions, Jenkins, GitLab CI, and Terraform.

Updated Jun 24, 2026

Search Tags:#ci/cd #security scanning #vulnerability detection #pipeline security #ci/cd auditing

One-click install

npx skills add https://github.com/Skobyn/talon --skill hunt-cicd-skobyn

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: hunt-cicd
Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-cicd
Command: npx skills add https://github.com/Skobyn/talon --skill hunt-cicd-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill detects and analyzes vulnerabilities in CI/CD pipelines, helping to secure critical infrastructure and prevent unauthorized access.

Core Features & Use Cases

CI/CD Pipeline Security: Scans for common vulnerabilities in GitHub Actions, Jenkins, GitLab CI, and Terraform.
Vulnerability Detection: Identifies RCEs, secret leaks, and other security issues in CI/CD workflows.
Use Case: When auditing a CI/CD pipeline for potential security breaches, this Skill can automatically uncover vulnerabilities like Jenkins Script Console RCEs, GitHub Actions workflow injection, and Terraform state leakage.

Quick Start

Run the 'hunt-cicd' skill to scan the CI/CD pipeline for vulnerabilities.

Frequently Asked Questions about hunt-cicd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect RCE vulnerabilities in my CI/CD pipelines?▼

To detect RCE vulnerabilities in CI/CD pipelines, scan the pipeline configuration and analyze logs and artifacts to identify execution flaws like Jenkins Script Console RCEs and GitHub Actions workflow injection.

What types of secret leaks can CI/CD security scanning identify?▼

CI/CD security scanning identifies secret leaks by analyzing pipeline configurations, logs, and artifacts across GitHub Actions, Jenkins, GitLab CI, and Terraform workflows to prevent unauthorized infrastructure access.

Does CI/CD vulnerability detection work with Terraform and GitLab CI?▼

CI/CD vulnerability detection works with Terraform and GitLab CI by scanning pipeline configurations to uncover issues like Terraform state leakage alongside standard workflow vulnerabilities.

What is the best way to audit CI/CD pipeline security configurations?▼

The best way to audit CI/CD pipeline security is to scan configurations and analyze logs and artifacts to precisely detect RCEs, secret leaks, and other vulnerabilities across multiple platforms.

When do I need to scan pipeline logs for CI/CD security issues?▼

You need to scan pipeline logs and artifacts for CI/CD security issues when auditing workflows to uncover vulnerabilities like GitHub Actions workflow injection and Terraform state leakage.