ci-cd-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and YAML templates for building CI/CD pipelines using GitHub Actions. The provided patterns align with industry standard practices for automated testing and deployment.
- [EXTERNAL_DOWNLOADS]: References official GitHub Actions (e.g.,
actions/checkout,actions/setup-node,actions/upload-artifact) and well-known third-party actions from Codecov and Vercel for integration. These are widely recognized and trusted sources for workflow automation. - [CREDENTIALS_UNSAFE]: Explicitly promotes the use of GitHub Secrets (e.g.,
${{ secrets.VERCEL_TOKEN }}) for managing sensitive information like API keys and database URLs, avoiding hardcoded credentials in the workflow files.
Audit Metadata