Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLIAbout this skill
Audit CI workflow files for supply-chain risk — unpinned actions, unpinned container images, pullrequest-triggered jobs with secret access, curl-pipe-shell installers, and bare :latest tags. Produces a structured markdown report with file:line refs.
Quick start
- Copy the install prompt. Use the green button above this README.
- Send it to your agent. Paste it into your coding agent’s chat and send.
- Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Review, license & listing details
Review the source before using this skill
This is an imported listing. We haven’t certified its safety, license, or compatibility. Skills may include executable scripts.
Automated security scan: Partial
Only SKILL.md was scanned. Supporting files and scripts were not checked. No safety grade has been assigned.
5 potential findings · Scanned 11/4/2026 · Scanner 0.2.1
- high: remote execution — SKILL.md, line 126
- high: remote execution — SKILL.md, line 181
- high: remote execution — SKILL.md, line 187
- high: remote execution — SKILL.md, line 218
- high: remote execution — SKILL.md, line 228
Content SHA-256: fdcab321aa3bd04500dcde525cc8ce23d9fb46dea913363ab81dea416e77a31b
About this listing
- Category
- Engineering
- Reported license
- MIT
- Listing language (estimated)
- English
- Review status
- Not individually reviewed
- Agent compatibility
- Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.