windsurf-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a guide for setting up CI/CD workflows. It promotes security best practices by providing templates for secret scanning (searching for common API key prefixes like AKIA or ghp_) and checking that sensitive files are included in ignore lists.
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) via restricted bash access for workflow management, such as triggering configuration syncs between repositories. This is consistent with its stated purpose of CI automation. - [DYNAMIC_EXECUTION]: A provided workflow template uses a one-liner Python command (
python3 -c) to validate the integrity of a JSON configuration file. This is a standard utility usage for CI environments and does not present a security risk.
Audit Metadata