navan-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate templates for CI/CD integration with the Navan SaaS platform. All network operations are directed to the official Navan API domain (api.navan.com).
- [SAFE]: Secret management instructions follow best practices, utilizing GitHub Actions secrets rather than hardcoded values. The provided YAML workflow includes token masking commands to prevent exposure in CI logs.
- [INDIRECT_PROMPT_INJECTION]: The skill includes steps to parse external API responses using jq. While this involves processing untrusted data, the processing is restricted to schema validation and summary generation with no dynamic code execution, presenting a low risk profile.
Audit Metadata