ci-cd-pipeline-generator
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates comprehensive security mandates, including pinning GitHub Actions to commit SHAs, limiting token permissions, and requiring the use of platform-native secret stores rather than hardcoding credentials.
- [SAFE]: The provided shell script (
scripts/validate-pipeline.sh) performs static analysis on generated configuration files to detect potential security issues like unpinned actions or hardcoded secrets. It operates locally without network access or privilege escalation. - [SAFE]: No obfuscation, prompt injection, or malicious persistence mechanisms were detected in the skill instructions or supporting files.
Audit Metadata