Skills for Real Engineers. Straight from my .agents directory.
39 skills
offensive-cicd-secrets
Agent skill from
Comprehensive secrets extraction methodology targeting CI/CD environments across all major platforms. Covers environment variable extraction from build contexts, exploitation of vault and secrets-manager misconfigurations (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager), runner and agent token abuse for lateral movement, OIDC federation attacks exploiting trust relationships between CI/CD providers and cloud platforms, build log leakage analysis for inadvertently exposed credentials, cache poisoning techniques for credential exfiltration, platform-specific credential store exploitation (GitHub Actions secrets, GitLab CI variables, Jenkins credential providers), service connection and service account abuse in Azure DevOps and GCP, and Docker registry credential theft from build environments. Maps to MITRE ATT&CK T1552 (Unsecured Credentials) and its sub-techniques. Each section provides enumeration procedures, extraction techniques, and post-exploitation pivot
How to install offensive-cicd-secrets
install offensive-cicd-secrets
# install the Claude-Red pack with the skills CLI
npx skills add SnailSploit/Claude-Red# or add only this skill to Claude Code: copy the folder
Skills/cicd/offensive-cicd-secrets/
# into
~/.claude/skills/offensive-cicd-secrets/ (all projects)
.claude/skills/offensive-cicd-secrets/ (one project)
1# Offensive CI/CD Secrets Extraction23Secrets in CI/CD environments are the primary objective for pipeline compromise. Every pipeline4holds credentials -- deployment keys, cloud provider tokens, API secrets, registry passwords,5database connection strings -- and the mechanisms protecting them are consistently weaker than6those guarding production secrets. You exploit the fundamental tension in CI/CD design: pipelines7need credentials to deploy, but the environments executing pipelines are transient, shared, and8often accessible to anyone who can open a pull request.910This skill systematically covers every extraction path across CI/CD platforms, from trivial11environment variable dumps to sophisticated OIDC federation abuse. You enumerate what secrets12exist, determine which extraction technique applies, recover the credentials, and pivot to13expand your access.1415MITRE ATT&CK: T1552 (Unsecured Credentials), T1552.001 (Credentials In Files), T1552.00416(Private Keys), T1552.007 (Container API)1718## Quick Workflow19201. Gain code execution in a CI/CD pipeline (see offensive-cicd-pipeline skill for injection vectors).212. Enumerate the execution environment -- platform, runner type, available tools, network access.223. Dump all environment variables and filter for secrets patterns.234. Query platform-specific credential stores using available tokens (GITHUB_TOKEN, CI_JOB_TOKEN, PAT).245. Check for vault/secrets-manager integrations and test for misconfigurations.25…
Excerpt shown under the repository's MIT license.
More skills in Claude-Red
Keep exploring
Similar skill repositories
An agentic skills framework & software development methodology that works.
15 skills
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
CC1 skill
Public repository for Agent Skills
20 skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
CCCU6 skills
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
CCCXGHGM+135 skills