aidlc-deploy

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill generates deployment configurations and CI/CD pipelines using predefined templates and user-supplied decisions. It explicitly implements security best practices by instructing the agent to avoid writing secrets, tokens, or credentials into generated files, recommending instead the use of platform-native secret management.
  • [SAFE]: External references (such as GitHub Actions, Terraform providers, and Docker base images) point to official repositories from trusted organizations including AWS, Google, and HashiCorp, or well-known registries like NPM and the Terraform Registry.
  • [SAFE]: The generation process utilizes multi-stage Docker builds and non-root users for container targets, and promotes secure authentication methods like OIDC (OpenID Connect) for AWS and GCP deployments.
  • [SAFE]: The workflow is strictly sequential and requires explicit user approval at multiple stages (decisions, planning, and generation), preventing autonomous or unintended file modifications.
  • [SAFE]: All network operations mentioned, such as web searches for tool versions or health check calls, are scoped to legitimate development tasks and target well-known, established services.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 08:00 AM
Security Audit — agent-trust-hub — aidlc-deploy