github-actions-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides workflow templates that install the
htmlhintandlinkinatorpackages from the npm registry during the CI process. - [EXTERNAL_DOWNLOADS]: The workflow examples use the
dependency-check/Dependency-Check_Action@mainaction. Referencing a branch name instead of a pinned version or commit SHA creates a dependency on the remote repository's current state. - [PROMPT_INJECTION]: The
AI FIRST Quality Principlesection contains directives aimed at influencing the agent's operational logic, specifically requiring multiple iterations and prohibiting shortcuts during task execution.
Audit Metadata