anth-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a legitimate developer tool designed for setting up automated testing environments. No malicious patterns, obfuscation, or persistence mechanisms were detected.
- [CREDENTIALS_UNSAFE]: The skill provides templates that utilize repository secrets (
${{ secrets.ANTHROPIC_API_KEY }}) and environment variables (os.getenv("ANTHROPIC_API_KEY")) for authentication. This follows industry-standard security practices for handling sensitive API keys in automated environments and avoids hardcoding credentials. - [EXTERNAL_DOWNLOADS]: The skill fetches standard GitHub Actions (
actions/checkout@v4,actions/setup-python@v5) and official Python packages (anthropic,pytest) from well-known registries. These references are documented neutrally and follow expected development workflows.
Audit Metadata