hunt-cicd
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for network fingerprinting and reconnaissance of CI/CD environments, utilizing standard tools like curl, jq, and grep.
- [DATA_EXFILTRATION]: Instructions detail how to exfiltrate sensitive tokens and environment variables from target runners and servers to external out-of-band collaborator services for vulnerability confirmation.
- [REMOTE_CODE_EXECUTION]: The skill provides specific Groovy and shell-based payloads designed to achieve remote code execution on Jenkins instances and GitHub Actions runners as part of the vulnerability hunting process.
- [EXTERNAL_DOWNLOADS]: The skill directs the download of the Jenkins CLI utility (jenkins-cli.jar) directly from the target server for use in exploiting known file-read vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface by processing untrusted external data such as CI/CD logs, workflow YAML files, and Terraform state files, though this ingestion is a core requirement for its auditing functionality.
Audit Metadata