cicd-supply-chain

仓库创建 2026年5月19日最近提交 26 天前SkillHot 收录 22 天前

▸ 精选理由

实战导向，覆盖 pwn request、被污染 Actions 与可利用的 CI 场景，适合审计团队。

▸ 风险提示

涉及污染构建/执行流程的技术，可能被用于破坏或未授权代码执行。

这个 Skill 做什么

针对 CI/CD 流水线与软件供应链的攻击与审计策略集合。

针对 CI/CD 流水线和软件供应链做攻击或审计：能找出被注入的恶意执行、被污染的 Actions、可变版本标签和依赖混淆等问题。适用于 GitHub Actions、GitLab CI、Jenkins 等场景，能模拟被污染的 pull/workflow 请求并评估 OIDC、runner 与制品溯源风险。重点是复现供应链入侵路径并给出防护建议。

▸ 展开 SKILL.md 英文原文

Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance

开发编程CI/CD供应链攻击PPE通用

328

Stars

Forks

仓库内 Skill

+17

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/skills/cicd-supply-chain/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/skills/cicd-supply-chain/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# CI/CD Pipeline Poisoning & Supply-Chain Attacks

## When to Activate

- Auditing or attacking GitHub Actions / GitLab CI / Jenkins pipelines for code execution
- Hunting `pull_request_target` / `workflow_run` "pwn requests" and Poisoned Pipeline Execution (PPE)
- Assessing compromised third-party Actions, mutable version tags, and Actions cache poisoning
- Dependency confusion, typo/slopsquatting, and malicious package/install-hook payloads
- Self-hosted / non-ephemeral runner abuse and runner backdoors
- CI secret exfiltration and OIDC cloud-role (AWS/GCP/Azure) trust-policy abuse
- Validating SLSA build provenance and signing gates (defense / blue-team validation)

## Technique Map

| Te

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有