hex-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious behaviors such as prompt injection, obfuscation, or unauthorized privilege escalation were identified. The skill implements standard CI/CD and automated testing patterns.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill uses best practices for secret management by referencing GitHub Actions Secrets (${{ secrets.HEX_API_TOKEN }}) rather than hardcoding credentials.
- [EXTERNAL_DOWNLOADS]: References official GitHub Actions (actions/checkout and actions/setup-node) and the official Hex API endpoint (app.hex.tech), all of which are trusted or well-known services.
Audit Metadata