cicd-pipeline-setup
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard CI/CD configurations and templates.
- [EXTERNAL_DOWNLOADS]: The reference guides and templates utilize official actions and Docker images from trusted organizations and well-known services, including GitHub (actions/), AWS (aws-actions/), Docker, Snyk, and Aqua Security. These are standard components for CI/CD workflows.
- [INDIRECT_PROMPT_INJECTION]: The
scripts/validate-pipeline.shscript is designed to process external pipeline files. While this creates a theoretical surface for processing untrusted data, the script is a placeholder for validation logic and does not currently perform any unsafe operations with the input. - [COMMAND_EXECUTION]: The provided CI/CD scripts and Groovy pipelines involve standard shell command execution (
npm,docker,aws,kubectl) which is the intended and primary purpose of a CI/CD setup skill.
Audit Metadata