github-action
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is purely instructional documentation providing best practices for GitHub Action development and security review.
- [NO_CODE]: The skill contains no scripts, binaries, or active logic. It is comprised of markdown files for agent knowledge enhancement.
- [PROMPT_INJECTION]: No malicious prompt injection patterns or attempts to override agent safety constraints were detected. The instructions are focused on technical implementation guidelines.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any network operations or remote resource fetching.
- [CREDENTIALS_SAFE]: No hardcoded secrets, API keys, or unsafe credential management patterns are present. The documentation explicitly warns against hardcoding secrets.
- [OBFUSCATION]: No obfuscated content, encoded strings, or hidden text patterns were found.
Audit Metadata