devops
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill primarily consists of instructional content and configuration templates for DevOps workflows. It promotes secure practices such as managing secrets outside of source code and scrubbing sensitive data from logs.
- [EXTERNAL_DOWNLOADS]: The CI/CD workflow example references the official GitHub Actions checkout repository. This is a standard and expected reference for building automated pipelines.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates monitoring of application logs and metrics, which constitutes an ingestion point for external data. The risk is minimized by the skill's own recommendations for log sanitization.
- Ingestion points: Log aggregation and metric collection mentioned in workflows/monitor-infrastructure.md.
- Boundary markers: None explicitly defined in templates.
- Capability inventory: Deployment automation and CI/CD setup defined in SKILL.md and workflows/setup-cicd.md.
- Sanitization: Recommends scrubbing sensitive data in reference/monitoring-best-practices.md.
Audit Metadata