glean-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill adheres to security best practices by utilizing GitHub Secrets (e.g.,
${{ secrets.GLEAN_API_KEY }}) for API keys and domain configurations in the provided workflow template. - [SAFE]: The instructions explicitly mandate the redaction of sensitive data and the use of synthetic fixtures without real employee or customer info, minimizing the risk of accidental data exposure in CI logs.
- [SAFE]: Network operations within the integration tests are targeted solely at the official Glean API endpoint (
glean.com), which is consistent with the skill's primary purpose. - [SAFE]: No evidence of prompt injection, obfuscation, privilege escalation, or persistence mechanisms was found in the skill content or scripts.
- [SAFE]: The skill uses standard Node.js development tools and testing frameworks (
vitest) in a conventional manner.
Audit Metadata