ci-cd-pipeline-generator
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed and secure instructions for generating CI/CD pipelines for various platforms, including GitHub Actions, GitLab CI, and Jenkins. It explicitly mandates security practices like pinning actions to commit SHAs, limiting token permissions, and avoiding hardcoded secrets.
- [SAFE]: The accompanying validation script,
scripts/validate-pipeline.sh, is a benign utility designed to check generated configuration files for potential issues like hardcoded credentials or unpinned action versions. It does not perform any network operations or unauthorized file access. - [SAFE]: No evidence of obfuscation, prompt injection, data exfiltration, or persistence mechanisms was found in any of the provided files.
Audit Metadata