adobe-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the secure configuration of CI/CD pipelines by emphasizing standard security protocols.- [CREDENTIALS_UNSAFE]: The skill explicitly instructs users to store Adobe API credentials as GitHub Secrets using the
gh secret setcommand, which prevents sensitive information from being hardcoded in version control.- [EXTERNAL_DOWNLOADS]: GitHub Action workflows provided in the skill utilize official and well-known actions from theactions/organization (specificallyactions/checkout@v4andactions/setup-node@v4), which are trusted components of the GitHub Actions ecosystem.- [DATA_EXFILTRATION]: All network operations, including OAuth token generation and API smoke tests, are directed to legitimate and official Adobe domains such asims-na1.adobelogin.comandfirefly-api.adobe.io.- [COMMAND_EXECUTION]: The use of shell commands is restricted to standard development workflows (e.g.,npm ci,npm test) and secure management of secrets via the GitHub CLI, with no evidence of arbitrary code execution or piping remote scripts to a shell.
Audit Metadata