ci-cd
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill serves as a reference for CI/CD implementation and contains no malicious code or instructions.
- [EXTERNAL_DOWNLOADS]: The GitHub Actions pipeline references official repositories from the GitHub 'actions' organization and Docker's official 'docker' organization. It also includes the Codecov action, which is an industry-standard service for coverage reporting.
- [COMMAND_EXECUTION]: The pipelines execute common development commands such as pip for package management, pytest for testing, and kubectl for Kubernetes deployments, all of which are appropriate for the stated purpose.
- [CREDENTIALS_UNSAFE]: The templates demonstrate secure handling of sensitive data by utilizing platform-provided secret variables (e.g., GITHUB_TOKEN, KUBE_CONFIG) instead of hardcoding credentials.
Audit Metadata