github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The instructions are direct and focused on the primary purpose of providing workflow templates. There are no attempts to override safety filters, bypass guidelines, or extract system prompts.
- [CREDENTIALS_UNSAFE]: The workflow templates correctly demonstrate the use of GitHub Secrets (e.g.,
${{ secrets.AWS_ACCESS_KEY_ID }},${{ secrets.SNYK_TOKEN }}) for managing sensitive information. No hardcoded credentials or private keys are present. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known GitHub Actions from established organizations including GitHub (actions/), AWS (aws-actions/), Docker (docker/*), and security vendors like Snyk and Aqua Security. These are treated as safe, well-known services.
- [COMMAND_EXECUTION]: The skill contains example commands for CI/CD tasks like
npm install,kubectl apply, andpip install. These are legitimate examples within the context of a DevOps workflow skill and are not used for malicious purposes.
Audit Metadata