assemblyai-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides configuration for GitHub Actions workflows and Vitest testing suites, facilitating automated CI/CD processes.
- [SAFE]: Adheres to security best practices by using GitHub Secrets (
${{ secrets.ASSEMBLYAI_API_KEY }}) for API key management instead of hardcoding credentials. - [SAFE]: Uses official, well-known GitHub Actions (
actions/checkout,actions/setup-node) for the pipeline setup. - [SAFE]: Downloads sample audio data for integration testing from a well-known service (Google Cloud Storage) targeting official AssemblyAI sample files.
- [SAFE]: All tool usage (e.g., GitHub CLI via
gh secret set) is within the explicitly definedallowed-toolsscope in the frontmatter.
Audit Metadata