ci-cd-pipelines
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate templates for CI/CD workflows that emphasize security best practices, such as environment protection rules and minimal permission sets.
- [EXTERNAL_DOWNLOADS]: Fetches components and actions from official GitHub repositories of trusted organizations, including GitHub (actions/), AWS (aws-actions/), Docker (docker/), Cloudflare (cloudflare/), and Vercel (vercel/*). These are standard dependencies for automated deployment and testing.
- [CREDENTIALS_UNSAFE]: Correctly demonstrates the use of platform-native secret management (e.g., GitHub Secrets, GitLab CI variables) for sensitive data like AWS keys and API tokens, avoiding hardcoded credentials.
- [COMMAND_EXECUTION]: Contains standard build, lint, and test commands (e.g., npm, pytest, go test, docker build) required for pipeline automation within the context of the workflow examples.
- [DATA_EXFILTRATION]: Network operations are limited to intended deployment targets and health checks, such as syncing with S3 or triggering deployment webhooks via stored secrets.
Audit Metadata