jenkins-migration
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional markdown files and templates that provide guidance on syntax mapping and structural conversion from Jenkins to GitHub Actions. It does not contain executable code or malicious logic.
- [CREDENTIALS_UNSAFE]: The migration guide correctly identifies sensitive credential types (such as SSH keys and AWS credentials) and instructs the user to migrate them to GitHub Secrets using the
${{ secrets.* }}syntax. This promotes secure secret management rather than exposing credentials. - [EXTERNAL_DOWNLOADS]: The skill references multiple official and well-known GitHub Actions (e.g.,
actions/checkout@v4,docker/build-push-action@v5,slackapi/slack-github-action@v1,hashicorp/setup-terraform@v3) as recommended replacements for Jenkins plugins. These references use version pinning and target established services, which is consistent with secure CI/CD practices. - [PROMPT_INJECTION]: The instructions do not contain any patterns intended to bypass AI safety filters, override system prompts, or extract internal configuration.
- [DATA_EXFILTRATION]: No suspicious network requests, URL obfuscation, or commands that could be used for unauthorized data exfiltration were found in any of the skill files.
Audit Metadata