evernote-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code templates for standard software development workflows.
- Credentials Management: Correctly instructs users to use
secrets.EVERNOTE_SANDBOX_TOKENand other environment variables rather than hardcoding credentials. - Mock Testing: Provides a robust
MockNoteStoreandMockEvernoteClientto facilitate testing without making actual network requests to the Evernote API, reducing the risk of accidental data exposure or credential leakage during CI runs. - Dependency Safety: References standard, well-known GitHub Actions (
actions/checkout,actions/setup-node) and security scanning tools (snyk/actions/node). - Best Practices: Includes guidance on environment-specific secrets, rate limiting, and clean-up of test data, which are standard security and operational best practices.
Audit Metadata