ci-cd-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill serves as a reference for CI/CD best practices and provides boilerplate YAML configurations for GitHub Actions.
  • [INDIRECT_PROMPT_INJECTION]: The skill outlines patterns for interacting with pull request data using the GitHub CLI. 1. Ingestion points: Command output from gh pr checks (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Includes Bash and Write tools (SKILL.md). 4. Sanitization: Absent in the provided templates.
  • [EXTERNAL_DOWNLOADS]: The provided templates reference various official actions from trusted providers. * Fetches standard actions from the actions, docker, and dependabot organizations on GitHub (workflows.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 03:02 PM