jenkins-cd

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_SAFE]: The skill correctly demonstrates the use of the Jenkins withCredentials block to bind secrets to environment variables, which ensures they are masked in logs. It also provides examples for integrating with HashiCorp Vault and AWS Secrets Manager using official plugins.
  • [COMMAND_EXECUTION]: Provides numerous examples of executing shell commands via the Jenkins sh step for deployment tasks (e.g., kubectl, helm, aws cli, docker). These examples follow standard CI/CD patterns and use parameterization for environment variables.
  • [EXTERNAL_DOWNLOADS]: Mentions pulling container images from Docker registries and downloading artifacts from repositories like Nexus or Artifactory. These operations target well-known artifact management services and are standard for deployment workflows.
  • [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were detected. All network operations (e.g., curl to Prometheus or Slack) are within the context of deployment notification and health monitoring.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — jenkins-cd