github-starred/awesome-actions
2
0
Fork 0
mirror of https://github.com/sdras/awesome-actions.git synced 2026-07-25 01:28:48 -05:00
Code Issues 3.7k Packages Projects Releases Wiki Activity

[PR #793] Add skill-audit-mcp to Security #12478

New Issue
Open
opened 2026-06-17 21:50:37 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-06-17 21:50:37 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/sdras/awesome-actions/pull/793
Author: @eltociear
Created: 5/11/2026
Status: 🔄 Open

Base: main ← Head: add-skill-audit-mcp

📝 Commits (1)

  • 106113c Add skill-audit-mcp to Security

📊 Changes

1 file changed (+1 additions, -0 deletions)

View changed files

📝 README.md (+1 -0)

📄 Description

Adds skill-audit-mcp under Security.

Scans MCP servers, AI agent skill files, and plugins for 68 attack patterns across 4 severity levels:

  • CRITICAL — credential exfiltration, seed-phrase harvest, download-and-execute
  • HIGH — arbitrary code execution, auth bypass, identity impersonation
  • MEDIUM — prompt injection, obfuscation, privilege escalation
  • LOW — external URL refs, broad filesystem access

Output: SARIF 2.1.0 → GitHub Code Scanning Security tab.

Usage:

- uses: eltociear/skill-audit-mcp@v1
  with:
    path: '.'
    severity: 'MEDIUM'
    fail-on: 'HIGH'

Composite action, no Docker/Node setup overhead. Released v1.0.1 on 2026-05-11.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/sdras/awesome-actions/pull/793 **Author:** [@eltociear](https://github.com/eltociear) **Created:** 5/11/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `add-skill-audit-mcp` --- ### 📝 Commits (1) - [`106113c`](https://github.com/sdras/awesome-actions/commit/106113c6d0773732e440a46f4215a161cc811ae6) Add skill-audit-mcp to Security ### 📊 Changes **1 file changed** (+1 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+1 -0) </details> ### 📄 Description Adds [skill-audit-mcp](https://github.com/eltociear/skill-audit-mcp) under **Security**. Scans MCP servers, AI agent skill files, and plugins for **68 attack patterns** across 4 severity levels: - **CRITICAL** — credential exfiltration, seed-phrase harvest, download-and-execute - **HIGH** — arbitrary code execution, auth bypass, identity impersonation - **MEDIUM** — prompt injection, obfuscation, privilege escalation - **LOW** — external URL refs, broad filesystem access **Output:** SARIF 2.1.0 → GitHub Code Scanning Security tab. **Usage:** ```yaml - uses: eltociear/skill-audit-mcp@v1 with: path: '.' severity: 'MEDIUM' fail-on: 'HIGH' ``` Composite action, no Docker/Node setup overhead. Released v1.0.1 on 2026-05-11. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-06-17 21:50:37 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
enhancement
help wanted
pull-request
Mirrored from GitHub Pull Request
No labels pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/awesome-actions#12478