github-actions-expert
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and utility resource for GitHub Actions, providing valid YAML templates and diagnostic shell commands.
- [SAFE]: Security recommendations within the skill, such as pinning actions to specific SHA hashes (e.g.,
actions/checkout@b4ffde65...) and using OIDC for AWS credentials, align with industry best practices. - [SAFE]: Standard CLI tools like
yamllint,grep, and the GitHub CLI (gh) are used for their intended purposes of linting, searching, and monitoring workflow execution. - [SAFE]: No evidence of obfuscation, credential exfiltration, persistence mechanisms, or unauthorized privilege escalation was found in the skill content or code templates.
Audit Metadata