github-actions-templates

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The instructions are direct and focused on the primary purpose of providing workflow templates. There are no attempts to override safety filters, bypass guidelines, or extract system prompts.
  • [CREDENTIALS_UNSAFE]: The workflow templates correctly demonstrate the use of GitHub Secrets (e.g., ${{ secrets.AWS_ACCESS_KEY_ID }}, ${{ secrets.SNYK_TOKEN }}) for managing sensitive information. No hardcoded credentials or private keys are present.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known GitHub Actions from established organizations including GitHub (actions/), AWS (aws-actions/), Docker (docker/*), and security vendors like Snyk and Aqua Security. These are treated as safe, well-known services.
  • [COMMAND_EXECUTION]: The skill contains example commands for CI/CD tasks like npm install, kubectl apply, and pip install. These are legitimate examples within the context of a DevOps workflow skill and are not used for malicious purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 08:43 AM