depot-ci
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages CI configuration by reading and transforming YAML workflow files from repositories.
- Ingestion points: Local workflow files in .github/workflows/ and .depot/workflows/ are read during migration and execution (SKILL.md).
- Boundary markers: The skill does not provide specific instructions for the agent to use delimiters or ignore embedded instructions when reading these files.
- Capability inventory: The skill provides access to remote command execution via depot ci run, interactive shells via depot ci ssh, and secret management capabilities (SKILL.md).
- Sanitization: The migration command performs technical validation by analyzing compatibility and disabling jobs with unsupported features (references/migration.md).
- [EXTERNAL_DOWNLOADS]: The skill references vendor-owned actions for test integration.
- References: Fetches configuration and reporting logic from the depot/tests-run-action and depot/test-report-action repositories (references/test-splitting.md).
Audit Metadata