ci-cd-and-automation
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and templates for GitHub Actions, following industry-standard security and automation practices. It specifically highlights the importance of using GitHub Secrets for credentials instead of hardcoding them, which is a key security recommendation for avoiding data exposure.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known GitHub Actions (e.g.,
actions/checkout@v4,actions/setup-node@v4) and official CLI tools (e.g.,vercel,playwright,prisma). These are reputable sources and are documented neutrally as part of the intended automation purpose. - [COMMAND_EXECUTION]: The skill includes shell commands for project management (e.g.,
npm ci,npm test,npx tsc). These commands are standard for JavaScript development environments and do not present a security risk within the context of the provided instructions. - [REMOTE_CODE_EXECUTION]: The workflow examples include package installations (e.g.,
npm ci,npx playwright install). These are routine for CI/CD environments and target well-known package registries (NPM).
Audit Metadata