Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLIAbout this skill
Security review, hardening, and vulnerability scanning for Buildkite pipelines and self-hosted agents (CI/CD). Use when auditing a .buildkite/pipeline.yml or agent setup, hardening CI/CD, or answering "is this pipeline/agent secure?". Covers secrets in YAML, OIDC vs static creds, plugin pinning & RCE, untrusted fork/PR builds, agent hooks as security controls (pre-bootstrap job rejection, allowed-plugins, no-command-eval, no-local-hooks, signed pipelines), Docker socket/privileged steps, queue/cluster isolation, and injection via build metadata. Runs an executable scanner plus gitleaks when available.
Quick start
- Copy the install prompt. Use the green button above this README.
- Send it to your agent. Paste it into your coding agent’s chat and send.
- Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Review, license & listing details
This is an imported listing. We haven’t certified its safety, license, or compatibility. Skills may include executable scripts.
Only SKILL.md was scanned. Supporting files and scripts were not checked. No safety grade has been assigned.
1 potential finding · Scanned 11/4/2026 · Scanner 0.2.1
- high: remote execution — SKILL.md, line 45
Content SHA-256: fb8b3ba037aee7da24fedda5d0714bc4138f420d755bad89a3bd0c65cfd37f87
About this listing
- Category
- Security
- Reported license
- MIT
- Listing language (estimated)
- English
- Review status
- Not individually reviewed
- Agent compatibility
- Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.