github-actions
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by recommending the use of GitHub Secrets and OpenID Connect (OIDC) for handling sensitive credentials, effectively preventing credential exposure.
- [SAFE]: Implementation patterns explicitly include pinning third-party actions to commit SHAs or specific major versions to mitigate supply chain risks and ensure pipeline stability.
- [SAFE]: The skill includes extensive reference documents (ref_guide_1.md through ref_guide_8.md) containing repetitive architectural patterns and code snippets. These files were analyzed for obfuscation and hidden instructions and found to contain benign content likely intended for stress-testing or comprehensive documentation coverage.
- [SAFE]: All external references and dependencies point to well-known and trusted organizations or services, such as official GitHub Actions repositories, AWS actions, and standard container registries.
Audit Metadata