ci-audit

80 / 100 · Low risk

Fine to try. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.

By eyesecurity/skills (GitHub) · devops · 13 stars · scanned at commit f5790eb

Audits npm and PyPI supply-chain hardening in GitHub Actions workflows. Primary focus on how the project's package manager is invoked in CI — install commands, registry integrity, manager version pinning, publish flow (OIDC + provenance / attestations), and uncontrolled install surface (npx, pipx, global installs, curl|sh). Secondary focus on generic GitHub Actions hardening (external action SHA pinning, token permissions, pull_request_target). Trigger with /supplychain:ci-audit or /supplychain…

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a devops skill.

Found in 2 places.

plugins/supplychain/skills/ci-audit/SKILL.md, line 17echo "WORKFLOWS_DIR=$(ls -d .github/workflows 2>/dev/null && echo PRESENT || echo MISSING)"
plugins/supplychain/skills/ci-audit/SKILL.md, line 41W=".github/workflows"

Downloads and installs other software

The author does not mention this. Expected for a devops skill.

Found in 12 places.

plugins/supplychain/skills/ci-audit/SKILL.md, line 81echo "=== PY_INSTALL_CMDS ===" && grep -nHE '(\bpip install\b|\buv (sync|pip install|pip sync)\b|\bpoetry install\b|\bpdm (sync|install)\b|\bpipenv (sync|instal
plugins/supplychain/skills/ci-audit/SKILL.md, line 85echo "=== PIPX_RUN ===" && grep -nHE '(^|\s)(pipx run|pipx install|uvx)\s+[^-]' $W/*.yml $W/*.yaml 2>/dev/null
plugins/supplychain/skills/ci-audit/SKILL.md, line 87echo "=== PY_AD_HOC_PIP ===" && grep -nHE '(^|\s)(sudo\s+)?pip install\s+[^-]' $W/*.yml $W/*.yaml 2>/dev/null | grep -vE -- '-r\s|-c\s|--requirement|--constrain

Show 9 more

plugins/supplychain/skills/ci-audit/SKILL.md, line 205- `NPM_GLOBAL_INSTALL` non-empty → 🔶 FAIL "`npm install -g` / `pnpm add -g` / `yarn global add` in workflow resolves outside the project lockfile and runs the
plugins/supplychain/skills/ci-audit/SKILL.md, line 222- **pip + requirements.txt + hashes** (`HASHED_REQS_IN_REPO=YES`): expect `pip install -r requirements.txt --require-hashes`. Missing `--require-hashes` flag in
plugins/supplychain/skills/ci-audit/SKILL.md, line 223- **pip + requirements.txt + no hashes** (`HASHED_REQS_IN_REPO=NO`): 🔶 FAIL "`pip install -r requirements.txt` without `--require-hashes` resolves a fresh arti
plugins/supplychain/skills/ci-audit/SKILL.md, line 224- **pip without `-r`** (`PY_AD_HOC_PIP` non-empty): 🔶 FAIL "ad-hoc `pip install <pkg>` resolves live from PyPI — no lockfile, no release-age gate, no pinning.
plugins/supplychain/skills/ci-audit/SKILL.md, line 262- `PIPX_RUN` non-empty → ⚠️ WARN "`pipx run` / `uvx` resolves the tool fresh from PyPI every run — no lockfile, no release-age gate, no pinning. A compromised t
plugins/supplychain/skills/ci-audit/SKILL.md, line 263- `PY_PIPE_EXEC` non-empty → 🚨 CRITICAL "`curl … | python` / `curl … | sh` in workflow — the remote endpoint can serve different code on every fetch and runs i
plugins/supplychain/skills/ci-audit/SKILL.md, line 264- `PY_AD_HOC_PIP` non-empty (covered under PY-1 already if the tool is pip; suppress duplicate here when PY-1 already fired on the same line) → 🔶 FAIL "ad-hoc
plugins/supplychain/skills/ci-audit/SKILL.md, line 335└─ .github/workflows/ci.yml: pip install -r requirements.txt --require-hashes
plugins/supplychain/skills/ci-audit/SKILL.md, line 360→ Add --require-hashes to pip install in ci.yml and regenerate requirements.txt with pip-compile --generate-hashes — closes the lightning 2.6.x (Apr 2026) wheel

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'ci-audit' ] || [ -L ~/.agents/skills/'ci-audit' ]; then echo 'A skill folder named ci-audit already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/eyesecurity/skills' "$d" && git -C "$d" checkout --quiet 'f5790eb83ab8f632ad86f456a485e0b2029a7a5d' -- 'plugins/supplychain/skills/ci-audit' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/supplychain/skills/ci-audit' ~/.agents/skills/'ci-audit' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'ci-audit' ~/.claude/skills/'ci-audit' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for eyesecurity/skills shows the score of its lowest-scoring skill.

SkillTrust badge for eyesecurity/skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/eyesecurity/skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/eyesecurity/skills/)

Score history

Date	Version	Score
2026-11-08	`f5790eb`	80
2026-11-06	`f5790eb`	80