deployment-automation
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides configuration templates for standard deployment workflows. It utilizes official and well-known GitHub Actions (such as
actions/checkoutandamondnet/vercel-action) and official CLI tools (Vercel, Supabase) which are appropriate for its stated purpose of deployment automation. - [SAFE]: The skill correctly demonstrates secure secret management practices. It instructs users to use
vercel secretsand GitHub Secrets rather than hardcoding sensitive credentials in source code or configuration files. - [SAFE]: Network operations, such as health check probes (
curl) and monitoring reports (fetch), target project-defined environment variables or well-known services (Vercel Analytics/Speed Insights), representing normal application behavior. - [SAFE]: Command execution instructions (e.g.,
npm ci,vercel --prod,npx playwright test) are limited to standard build, test, and deployment tasks within a controlled CI/CD environment.
Audit Metadata