product-tutorial-pipeline

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill outlines a standard development pipeline for documentation, involving branching, environment setup, and screenshot beautification.
  • [COMMAND_EXECUTION]: The skill utilizes local shell scripts (test-server-on-daytona.sh, beautify.mjs) and standard CLI utilities (git, gh, node, daytona, pkill) to perform its tasks. These actions are within the expected scope of a documentation tool.
  • [CREDENTIALS_UNSAFE]: The skill references the use of environment variable managers (Infisical) and mounted volumes for secrets, which is consistent with secure development practices and avoids hardcoded credentials.
  • [EXTERNAL_DOWNLOADS]: The skill mentions using raw.githubusercontent.com for linking screenshots in PR descriptions, which is a standard practice for GitHub workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 12:27 PM
Security Audit — agent-trust-hub — product-tutorial-pipeline