writing-github-actions
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill is an educational resource for writing GitHub Actions workflows and does not contain malicious code or exfiltration patterns.\n- [EXTERNAL_DOWNLOADS]: The skill documentation and examples reference official GitHub Actions and cloud provider integrations from trusted organizations including AWS, Azure, and Google Cloud. These are well-known services provided by established vendors.\n- [COMMAND_EXECUTION]: Includes a utility script
scripts/validate-workflow.shfor developers to use locally. This script uses standard CLI tools likegrep,yq, andpython3to validate YAML syntax and detect common security misconfigurations like hardcoded secrets or unpinned actions.
Audit Metadata