ci-cd-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a reference for CI/CD best practices and provides boilerplate YAML configurations for GitHub Actions.
- [INDIRECT_PROMPT_INJECTION]: The skill outlines patterns for interacting with pull request data using the GitHub CLI. 1. Ingestion points: Command output from
gh pr checks(SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: IncludesBashandWritetools (SKILL.md). 4. Sanitization: Absent in the provided templates. - [EXTERNAL_DOWNLOADS]: The provided templates reference various official actions from trusted providers. * Fetches standard actions from the
actions,docker, anddependabotorganizations on GitHub (workflows.md).
Audit Metadata