juicebox-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by utilizing GitHub Secrets for API key management and targeting official service domains (api.juicebox.ai) for integration tests.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external dataset analysis, it includes explicit instructions for data sanitization, scope validation, and leakage prevention to mitigate risks associated with untrusted data ingestion. It mandates the exclusion of secrets and contact data from CI receipts and requires verification of export counts.
- [COMMAND_EXECUTION]: The skill utilizes standard build and configuration tools (npm, gh CLI) appropriate for its stated purpose of configuring CI/CD pipelines. All command examples provided represent standard development workflows.
Audit Metadata