travis-ci
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [REMOTE_CODE_EXECUTION]: In 'references/build-lifecycle.md', the skill includes an example command 'curl https://example.com/tool | bash' for installing tools during the 'before_install' phase. This demonstrates a remote script execution pattern common in CI environments.
- [EXTERNAL_DOWNLOADS]: The 'SKILL.md' file recommends the use of a third-party Docker image 'pipelinecomponents/yamllint' for configuration validation, which involves pulling a container from an external registry.
- [DATA_EXFILTRATION]: The skill provides templates in 'references/testing-patterns.md' and 'references/build-lifecycle.md' for sending build status updates to external services like Slack or custom API endpoints using 'curl' POST requests.
- [COMMAND_EXECUTION]: The skill consists primarily of shell command examples for configuring build, test, and deployment phases in a CI pipeline.
- [NO_CODE]: The skill contains only documentation in Markdown and configuration in YAML, with no executable scripts or binaries included in the distribution.
Audit Metadata