adobe-ci-integration

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates the secure configuration of CI/CD pipelines by emphasizing standard security protocols.- [CREDENTIALS_UNSAFE]: The skill explicitly instructs users to store Adobe API credentials as GitHub Secrets using the gh secret set command, which prevents sensitive information from being hardcoded in version control.- [EXTERNAL_DOWNLOADS]: GitHub Action workflows provided in the skill utilize official and well-known actions from the actions/ organization (specifically actions/checkout@v4 and actions/setup-node@v4), which are trusted components of the GitHub Actions ecosystem.- [DATA_EXFILTRATION]: All network operations, including OAuth token generation and API smoke tests, are directed to legitimate and official Adobe domains such as ims-na1.adobelogin.com and firefly-api.adobe.io.- [COMMAND_EXECUTION]: The use of shell commands is restricted to standard development workflows (e.g., npm ci, npm test) and secure management of secrets via the GitHub CLI, with no evidence of arbitrary code execution or piping remote scripts to a shell.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 04:44 PM