abridge-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure CI/CD practices by instructing users to store sensitive credentials (sandbox URLs, client secrets, and organization IDs) as protected GitHub Secrets rather than hardcoding them in scripts or workflows.
- [SAFE]: It includes a dedicated security scanning step (
phi-leak-scan) that uses regular expressions to detect potential Protected Health Information (PHI) like Social Security Numbers (SSNs) in the source code before deployment. - [SAFE]: The provided GitHub Actions workflow uses official, versioned actions (e.g.,
actions/checkout@v4,actions/setup-node@v4) and targets standard development branches (main,develop), following established DevOps standards. - [SAFE]: The integration tests utilize environment variables for configuration and target sandbox environments for testing, demonstrating appropriate separation between testing and production environments.
- [SAFE]: No obfuscation, hidden URLs, unauthorized remote code execution, or privilege escalation patterns were found in the instructions or code samples.
Audit Metadata