heyeddi-ci-guide
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily documentation-based. The
manifest.jsonandSKILL.md(frontmatter) explicitly definetools: [], meaning the agent cannot execute any code through this skill. - [COMMAND_EXECUTION]: While
scripts/_skill_cli.pycontains asubprocess.runcall in a helper function, this script is not exposed as a tool in the manifest. It appears to be a boilerplate utility common in this vendor's skill sets and is not active in this specific skill. - [PROMPT_INJECTION]: The instructions in
SKILL.mdandcontext/ANTI_PATTERNS.md(e.g., "Always run...", "Never ask...") are task-specific behavioral constraints designed to enforce a specific CI workflow. They do not attempt to bypass core AI safety filters or jailbreak the model. - [DATA_EXPOSURE]: The skill mentions an official support email (
support@heyeddi.com) and standard GitHub PR workflows. No sensitive credentials, tokens, or private file paths are exposed or accessed.
Audit Metadata