github-actions
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and contains no executable code or malicious patterns. It focuses on enforcing security best practices for CI/CD pipelines.
- [SAFE]: Instructions explicitly direct agents to use least-privilege 'permissions' and avoid dangerous configurations such as 'pull_request_target' with untrusted code.
- [SAFE]: References to external actions and documentation target well-known and trusted sources, such as official GitHub and AWS action repositories.
- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or other threat vectors was detected across the provided files.
Audit Metadata