atlas-action
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for CI/CD integrations and does not contain any detected malicious patterns or obfuscation.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The instructions emphasize secret protection, recommending that sensitive database URLs and cloud tokens only be accessible in protected environments or through short-lived cloud tokens (OIDC), preventing exposure to untrusted pull request code.
- [EXTERNAL_DOWNLOADS]: The skill utilizes official vendor actions (
ariga/setup-atlas,ariga/atlas-action) and verified installation scripts (atlasgo.sh) for platform-specific setup and deployment tasks.
Audit Metadata