cicd-bot-command-injection
Fail
Audited by Socket on Sep 22, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
MALICIOUS. The skill is an offensive exploitation playbook for AI agents: it teaches how to trigger privileged CI/CD workflows, run attacker-controlled PR code, and exfiltrate secrets to attacker infrastructure. The data theft instructions and attacker-hosted pipe-to-interpreter payload make its footprint incompatible with any benign repository analysis skill.
Confidence: 97%Severity: 98%
Audit Metadata