frappe-testing-cicd
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to provide documentation and configuration examples for legitimate CI/CD and linting workflows within the Frappe ecosystem.
- [EXTERNAL_DOWNLOADS]: Mentions the installation of standard development tools from official registries like PyPI and NPM, and references official GitHub Actions for environment setup. These are well-known services and do not pose a security risk in this context.
- [REMOTE_CODE_EXECUTION]: Configures GitHub Actions and pre-commit hooks that utilize scripts from reputable sources (e.g.,
actions/*,pre-commit/*). These are standard practices for automated testing and code quality checks. - [COMMAND_EXECUTION]: Includes instructions for using
benchandghCLI tools to manage local development environments and repository configurations, which are consistent with the skill's documented intent. - [CREDENTIALS_UNSAFE]: Properly demonstrates the use of GitHub Secrets (e.g.,
GITHUB_TOKEN,CODECOV_TOKEN,SEMGREP_APP_TOKEN) for handling API tokens and sensitive environment variables in workflows, rather than hardcoding them.
Audit Metadata