jenkins-cd
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE]: The skill correctly demonstrates the use of the Jenkins
withCredentialsblock to bind secrets to environment variables, which ensures they are masked in logs. It also provides examples for integrating with HashiCorp Vault and AWS Secrets Manager using official plugins. - [COMMAND_EXECUTION]: Provides numerous examples of executing shell commands via the Jenkins
shstep for deployment tasks (e.g.,kubectl,helm,aws cli,docker). These examples follow standard CI/CD patterns and use parameterization for environment variables. - [EXTERNAL_DOWNLOADS]: Mentions pulling container images from Docker registries and downloading artifacts from repositories like Nexus or Artifactory. These operations target well-known artifact management services and are standard for deployment workflows.
- [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were detected. All network operations (e.g.,
curlto Prometheus or Slack) are within the context of deployment notification and health monitoring.
Audit Metadata