pipeline-security
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and integrates official GitHub Actions and tools from established organizations, including
aws-actionsfor AWS credential configuration,sigstore/cosign-installerfor container signing,anchorefor SBOM generation and vulnerability scanning, andslsa-frameworkfor build provenance. These references are documented as part of the skill's defensive hardening patterns. - [SAFE]: No malicious patterns, prompt injection attempts, or unauthorized data access behaviors were detected. The content is instructional and promotes the adoption of verified security configurations for DevOps environments.
Audit Metadata