alchemy-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The instructions correctly implement the use of GitHub Secrets (
${{ secrets.ALCHEMY_API_KEY }}and${{ secrets.DEPLOYER_PRIVATE_KEY }}) for handling sensitive authentication material, avoiding hardcoded credentials. - [SAFE]: The provided workflow includes a defensive security step that uses
grepto ensure the API key is not present in the distribution folder, which helps prevent accidental data exposure. - [SAFE]: All external actions and tools referenced (actions/checkout, actions/setup-node, Hardhat) are well-known, trusted resources within the development ecosystem.
- [SAFE]: No instances of prompt injection, obfuscation, or malicious persistence mechanisms were identified in the skill content.
Audit Metadata