ci-workflow-plan
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no executable scripts, shell commands, or external dependencies. It consists entirely of documentation and a checklist for planning CI workflows.
- [SAFE]: The instructions promote security best practices, explicitly advising the user to keep secrets scoped and to maintain minimal write permissions for CI tokens.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze repository information provided by the user to generate workflow plans.
- Ingestion points: User-provided repository metadata and requirements.
- Boundary markers: Not applicable as there is no tool execution capability defined in the skill.
- Capability inventory: The skill is restricted to generating text-based plans and does not include tools for file writes, network operations, or code execution.
- Sanitization: Not applicable for this text-only planning skill.
Audit Metadata