How do I install the Cicd Vulnerabilities skill?

Run npx skillmds@latest add aibot88/cicd-vulnerabilities in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Cicd Vulnerabilities safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cicd Vulnerabilities?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cicd Vulnerabilities free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Cicd Vulnerabilities?

aibot88 (@aibot88) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cicd Vulnerabilities by aibot88 — Agent Skill

Name: Cicd Vulnerabilities
Rating: 4.666666666666667 (3 reviews)
Author: aibot88

File contents

CI/CD Vulnerabilities — Skill Entry

This SKILL.md is the entrypoint for the CI/CD Vulnerabilities skill.

The skill encodes the OWASP Top 10 CI/CD Security Risks as structured, machine-readable references that an agent can query to identify, assess, and remediate CI/CD pipeline security risks.

Normative references (CI/CD Top 10)

00 Vulnerability Index
01 Insufficient Flow Control Mechanisms
02 Inadequate Identity and Access Management
03 Dependency Chain Abuse
04 Poisoned Pipeline Execution
05 Insufficient PBAC
06 Insufficient Credential Hygiene
07 Insecure System Configuration
08 Ungoverned Usage of 3rd Party Services
09 Improper Artifact Integrity Validation
10 Insufficient Logging and Visibility

Skill layout

SKILL.md — this file (skill entrypoint).
references/ — the CI/CD Top 10 normative documents.
- 00-vulnerability-index.md — master index of all vulnerability identifiers, categories, and cross-references.
- 01 through 10 — one document per vulnerability aligned with OWASP CI/CD Security numbering.
assets/ — reusable format and constants blocks.
- constants/ — vulnerability catalog and category definitions.
  - constants-cicd-catalog-v1.0.0.md
- formats/ — output contract examples.
  - format-vulnerability-assessment-v1.0.0.md
  - format-remediation-checklist-v1.0.0.md

---name: cicd-vulnerabilitiesdescription: OWASP CI/CD Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in continuous integration and continuous delivery environments.license: MIT--- # CI/CD Vulnerabilities — Skill Entry This `SKILL.md` is the **entrypoint** for the CI/CD Vulnerabilities skill. The skill encodes the **OWASP Top 10 CI/CD Security Risks** as structured, machine-readable references that an agent can query to identify, assess, and remediate CI/CD pipeline security risks. ## Normative references (CI/CD Top 10) 1. [00 Vulnerability Index](references/00-vulnerability-index.md) 2. [01 Insufficient Flow Control Mechanisms](references/01-insufficient-flow-control-mechanisms.md) 3. [02 Inadequate Identity and Access Management](references/02-inadequate-identity-access-management.md) 4. [03 Dependency Chain Abuse](references/03-dependency-chain-abuse.md) 5. [04 Poisoned Pipeline Execution](references/04-poisoned-pipeline-execution.md) 6. [05 Insufficient PBAC](references/05-insufficient-pbac.md) 7. [06 Insufficient Credential Hygiene](references/06-insufficient-credential-hygiene.md) 8. [07 Insecure System Configuration](references/07-insecure-system-configuration.md) 9. [08 Ungoverned Usage of 3rd Party Services](references/08-ungoverned-usage-of-3rd-party-services.md) 10. [09 Improper Artifact Integrity Validation](references/09-improper-artifact-integrity-validation.md) 11. [10 Insufficient Logging and Visibility](references/10-insufficient-logging-visibility.md) ## Skill layout - `SKILL.md` — this file (skill entrypoint). - `references/` — the CI/CD Top 10 normative documents. - `00-vulnerability-index.md` — master index of all vulnerability identifiers, categories, and cross-references. - `01` through `10` — one document per vulnerability aligned with OWASP CI/CD Security numbering. - `assets/` — reusable format and constants blocks. - `constants/` — vulnerability catalog and category definitions. - `constants-cicd-catalog-v1.0.0.md` - `formats/` — output contract examples. - `format-vulnerability-assessment-v1.0.0.md` - `format-remediation-checklist-v1.0.0.md`

Frequently asked questions

Cicd Vulnerabilities