ci-security-pipeline
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external scripts and binaries for security scanning tools. It fetches the Trivy installation script from the Aqua Security GitHub repository and the Syft installation script from the Anchore GitHub repository. It also downloads the Hadolint binary from its official GitHub releases.
- [REMOTE_CODE_EXECUTION]: The skill includes shell commands that download and execute scripts from remote repositories. These patterns, such as piping curl outputs to shell or using Go to install packages, are used to set up well-known security tools like Trivy, Syft, and Cosign.
Audit Metadata