ci-cd-pipeline-builder
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing well-structured YAML templates for GitHub Actions workflows. It demonstrates best practices for managing environment variables and secrets using standard GitHub Actions syntax (e.g.,
${{ secrets.VERCEL_TOKEN }}). - [SAFE]: External dependencies and GitHub Actions referenced (such as
actions/checkout,vercel-cli,supabase/setup-cli,google-github-actions/release-please-action, andgitleaks/gitleaks-action) are well-known, industry-standard tools from trusted organizations. - [SAFE]: The skill includes proactive security recommendations, such as including jobs for dependency auditing (
npm audit), static analysis (CodeQL), and secret scanning (gitleaks) within the CI/CD pipeline.
Audit Metadata