github-actions-cicd
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines best practices and provides a template for CI/CD automation. It contains no malicious code or suspicious instructions.
- [EXTERNAL_DOWNLOADS]: The example workflow references official and well-known GitHub Actions from trusted organizations (GitHub, AWS) and established security tools (ZAP). References to 'hack23.com' are vendor-owned resources used as scan targets.
- [CREDENTIALS_UNSAFE]: The skill advocates for high security standards by requiring the use of GitHub Secrets and OpenID Connect (OIDC) for AWS authentication, avoiding the use of long-lived access keys or hardcoded credentials.
Audit Metadata