obsidian-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill incorporates official GitHub Actions (e.g.,
actions/checkout,actions/setup-node,actions/upload-artifact) and recognized service actions (e.g.,codecov/codecov-action) to manage CI/CD workflows. These are standard tools for the repository's stated purpose. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Reads metadata from
manifest.json,package.json, andversions.jsonwithin the repository. - Boundary markers: Data is handled through structured JSON parsing.
- Capability inventory: Performs file system read/write operations via the
fsmodule and shell command execution for builds. - Sanitization: The
version-bump.mjsscript includes regex validation to ensure version strings conform to semver standards. - [DYNAMIC_EXECUTION]: The skill provides templates for local automation scripts and GitHub Action workflows. These are static configurations designed for standard developer environment automation.
Audit Metadata