github-actions-dataops
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and security-focused guidance for setting up GitHub Actions in data engineering environments. No malicious patterns or bypass attempts were detected.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to fetch Spark binaries from the official Apache Software Foundation website and Airflow constraints from the official Apache GitHub repository. These are verified well-known and trusted sources.
- [CREDENTIALS_UNSAFE]: The skill explicitly warns against using static long-lived credentials. It provides detailed templates for implementing OpenID Connect (OIDC) with AWS and GCP, which is the recommended secure alternative for GitHub Actions.
- [COMMAND_EXECUTION]: Shell commands are used within workflow steps to manage data tools like dbt and Airflow. These are standard operational patterns for CI/CD automation.
- [PROMPT_INJECTION]: The skill contains no attempts to override agent behavior, bypass safety filters, or extract system prompts. The instructional tone is technical and educational.
Audit Metadata