infra-ci-cd-github-actions
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes examples of using
sudo rm -rfto clean up specific directories (/usr/share/dotnet,/opt/ghc) on GitHub Actions runners. This is a standard and legitimate performance optimization to free up disk space for large builds on ephemeral CI environments. - [EXTERNAL_DOWNLOADS]: The skill references several well-known GitHub Actions for deployment and infrastructure setup, including
aws-actions/configure-aws-credentials,hashicorp/vault-action, andsoftprops/action-gh-release. It also provides instructions to install the Vercel CLI viabun. These are standard tools for the described CI/CD workflows. - [INDIRECT_PROMPT_INJECTION]: In
examples/deployment.md, the skill demonstrates using${{ github.event.head_commit.message }}as part of a GitHub Release body. - Ingestion points: Commit messages are pulled into the workflow context in
examples/deployment.md. - Boundary markers: No explicit delimiters are used in the example for the commit message.
- Capability inventory: The ingested data is used only for display in release notes; no shell execution or further tool calls are driven by this specific data.
- Sanitization: The content is used directly as a string for the release description.
Audit Metadata