website-cicd
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses GitHub Actions OIDC (OpenID Connect) for authentication, which is a security best practice as it avoids the need for hardcoded, long-lived AWS Access Keys or secrets.
- [SAFE]: The IAM Trust Policy is correctly scoped to the specific repository and branch (
repo:<owner>/<repo>:ref:refs/heads/main), preventing unauthorized repositories or other branches in the same repository from assuming the role. - [SAFE]: The IAM execution policy follows the principle of least privilege by restricting access only to the specific S3 bucket and CloudFront distribution associated with the project.
- [SAFE]: The skill uses standard GitHub Actions from official and trusted sources (actions/checkout@v4, actions/setup-node@v4, aws-actions/configure-aws-credentials@v4).
Audit Metadata