ci-cd
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official GitHub Actions and Docker images from well-known and trusted organizations, including Amazon Web Services (AWS), Docker, and Slack. These references are documented neutrally and follow industry standards for automation.
- [SAFE]: Instructions for secrets management are robust, directing the agent to use platform-native secret stores (e.g., GitHub Secrets, GitLab CI/CD Variables) rather than hardcoding sensitive information into pipeline files.
- [SAFE]: Hardcoded credentials found in the code examples (e.g.,
POSTGRES_PASSWORD: testpass) are restricted to isolated test environments (local Docker service containers) and do not represent a risk to production systems. - [SAFE]: The skill explicitly includes security guidelines such as pinning action and image versions to specific tags (e.g.,
@v4) to avoid unexpected changes and potential supply-chain vulnerabilities.
Audit Metadata