production-engineering-workflows
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a structured software development lifecycle (SDLC) that includes mandatory safety rules. These rules explicitly prohibit the commitment of secrets, require backups before data-destructive operations, and mandate human review or explicit approval for bypassing quality gates.
- [COMMAND_EXECUTION]: The skill guides the agent to perform standard development operations such as version control (
git,gh), dependency management (npm,yarn,pip), and testing (pytest,lighthouse). These operations are consistent with the skill's stated purpose of production engineering and are triggered by user commands for specific workflow phases. - [SAFE]: The provided Python script
scripts/validate_skill.pyis a passive utility designed to validate the format of the skill's own documentation. It uses standard library modules (re,sys,pathlib) for local file processing and does not perform network requests or execute untrusted code. - [SAFE]: All external resources and documentation links provided in the skill (e.g., DORA, Google SRE Book, OWASP, and Martin Fowler's articles) point to well-known, authoritative industry sources.
Audit Metadata