github-actions-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation and template repository for GitHub Actions. All analyzed files contain standard YAML configurations for CI/CD pipelines.
- [SAFE]: The
scripts/validate-pipeline.shfile is a benign shell script stub intended for future validation logic; it performs no dangerous actions. - [EXTERNAL_DOWNLOADS]: The skill references several official and well-known GitHub Actions (e.g.,
actions/checkout,actions/setup-node,docker/login-action,codecov/codecov-action). These are recognized as safe, well-known services from trusted sources (GitHub, Docker, Codecov). - [NO_CODE]: The skill does not bundle any executables or hidden binary data.
Audit Metadata