pipeline-security

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and integrates official GitHub Actions and tools from established organizations, including aws-actions for AWS credential configuration, sigstore/cosign-installer for container signing, anchore for SBOM generation and vulnerability scanning, and slsa-framework for build provenance. These references are documented as part of the skill's defensive hardening patterns.
  • [SAFE]: No malicious patterns, prompt injection attempts, or unauthorized data access behaviors were detected. The content is instructional and promotes the adoption of verified security configurations for DevOps environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 12:37 PM