jenkins-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The GitHub Actions template in
templates/pipeline.yamlreferences theactions/checkout@v4action, which is an industry-standard utility from a well-known service for CI workflows. - [COMMAND_EXECUTION]: The reference implementations in
references/declarative-pipeline-jenkinsfile.mdandreferences/scripted-pipeline.mdinclude shell command blocks (sh) for common CI tasks like runningnpmscripts,dockercommands, andkubectldeployments. These are standard for CI/CD automation and provided as templates for user customization. - [CREDENTIALS_UNSAFE]: The skill follows security best practices for secret management. In
references/scripted-pipeline.md, it demonstrates the use of the Jenkins Credentials plugin to handle sensitive data via environment variables, andSKILL.mdexplicitly includes a best-practice directive to avoid storing credentials in pipeline code.
Audit Metadata