cicd-pipeline-attack

MALICIOUS。该技能的 stated purpose 就是帮助 AI 代理实施 CI/CD 渗透、Secrets 窃取、供应链投毒和云横向移动；其能力、数据流和示例载荷均与攻击执行高度一致。虽多为文档型内容而非自动执行代码，但对 AI 代理提供了成体系的 offensive security/credential theft playbook，整体风险极高。

This is offensive guidance for CI/CD build-file injection and supply-chain compromise. It describes persistence through build and package-manager execution paths, runner reconnaissance, credential discovery, and potential package, image, or deployment tampering. The text itself does not execute commands, but its intended use and examples present a high-risk attack methodology.