CI/CD Pipeline Management
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to fetch and execute installation scripts from official developer tool repositories.
- Evidence:
curl -fsSL https://deb.nodesource.com/setup_22.x | bash -inSKILL.mdfor Node.js installation. - Evidence:
curl -sS https://getcomposer.org/installer | phpinSKILL.mdfor Composer installation. - [COMMAND_EXECUTION]: The skill uses standard shell commands to manage system packages and build application assets within a CI/CD environment.
- Evidence:
apt-get install,docker-php-ext-install, andnpm run buildinSKILL.md. - [EXTERNAL_DOWNLOADS]: Downloads configuration and installation files from reputable, well-known services.
- Evidence: Fetches Node.js setup from NodeSource and Composer installer from getcomposer.org.
- [INDIRECT_PROMPT_INJECTION]: The skill manages pipelines that ingest project metadata files which could potentially contain untrusted content.
- Ingestion points: Reads
composer.json,package.json, and lock files inSKILL.md. - Boundary markers: Absent; files are processed as standard build inputs.
- Capability inventory: Includes
Bashfor command execution andReadfor file access. - Sanitization: None; standard behavior for CI/CD pipeline automation.
Audit Metadata