jenkins-pipeline

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The GitHub Actions template in templates/pipeline.yaml references the actions/checkout@v4 action, which is an industry-standard utility from a well-known service for CI workflows.
  • [COMMAND_EXECUTION]: The reference implementations in references/declarative-pipeline-jenkinsfile.md and references/scripted-pipeline.md include shell command blocks (sh) for common CI tasks like running npm scripts, docker commands, and kubectl deployments. These are standard for CI/CD automation and provided as templates for user customization.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices for secret management. In references/scripted-pipeline.md, it demonstrates the use of the Jenkins Credentials plugin to handle sensitive data via environment variables, and SKILL.md explicitly includes a best-practice directive to avoid storing credentials in pipeline code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:03 PM
Security Audit — agent-trust-hub — jenkins-pipeline