lindy-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill provides documentation and templates for CI/CD automation. It does not contain any malicious instructions or obfuscated code.
- [EXTERNAL_DOWNLOADS]: The skill references standard GitHub Actions (actions/checkout, actions/setup-node, actions/github-script, codecov/codecov-action) and npm packages (vitest, supertest, @lindy-ai/sdk). These are well-known resources or official vendor libraries.
- [COMMAND_EXECUTION]: Instructions involve using gh CLI for secret management and npm for running tests. These tools are explicitly allowed in the skill's configuration and are used according to their intended purpose in a CI environment.
- [DATA_EXFILTRATION]: The skill includes a connectivity check that sends a POST request to a vendor-owned endpoint (public.lindy.ai) for legitimate health monitoring. This does not involve unauthorized data exfiltration.
Audit Metadata