github-actions-deploy
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official, trusted GitHub Actions (
actions/checkout@v4andactions/setup-python@v5) for the deployment workflow. - [SAFE]: The skill promotes secure credential management by explicitly instructing users to store API keys in GitHub Repository Secrets rather than hardcoding them.
- [SAFE]: No malicious patterns such as obfuscation, unauthorized file access, or suspicious network exfiltration were found in the instructions or the generated workflow.
- [SAFE]: The execution of scheduled tasks (cron) is the stated primary purpose of the skill and occurs within the ephemeral environment of a GitHub Actions runner.
Audit Metadata