ci-cd-github-actions
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides industry-standard templates and best practices for DevOps workflows.
- [EXTERNAL_DOWNLOADS]: The workflow templates reference official GitHub Actions from trusted sources, including
actions/checkout,actions/setup-node, andgithub/codeql-action. - [COMMAND_EXECUTION]: The skill contains standard CI/CD shell commands such as
pnpm installandpnpm test. These are instructional examples for automated building and testing and do not pose a security risk in this context. - [CREDENTIALS_UNSAFE]: The skill explicitly promotes security best practices, such as using OIDC instead of long-lived tokens and restricting secret exposure in logs.
Audit Metadata