github-ci

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely documentation-based and does not contain any executable code or scripts that perform suspicious operations.
  • [EXTERNAL_DOWNLOADS]: References official GitHub Actions runners and various well-known third-party actions from the GitHub Marketplace (e.g., actions/checkout, codecov/codecov-action, dorny/test-reporter). All sources are established services.
  • [COMMAND_EXECUTION]: Includes standard command-line examples for setting up CI environments, running linters via Docker, and executing test suites (e.g., npm test, pytest). These are standard development practices.
  • [PROMPT_INJECTION]: No patterns attempting to bypass agent safety or override system instructions were found.
  • [DATA_EXFILTRATION]: No evidence of hardcoded credentials or unauthorized data access. The skill explicitly teaches how to securely manage secrets using the GitHub Actions secrets vault.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — github-ci