ci-pipeline-synthesizer
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard boilerplate configurations for GitHub Actions across Node.js, Python, Go, and Rust. All templates use official GitHub actions (e.g.,
actions/checkout,actions/setup-node,actions/setup-go,actions/setup-python,actions/cache) or widely trusted community toolchains (e.g.,dtolnay/rust-toolchain). - [REMOTE_CODE_EXECUTION]: While the generated workflows execute commands like
npm install,pip install, andgo test, these are the intended primary purpose of the skill (CI/CD automation) and target standard, user-controlled build environments. The downloads originate from official package registries (npm, PyPI, Crates.io) and well-known service providers. - [COMMAND_EXECUTION]: The skill generates shell commands for building and testing, which is expected behavior for a CI/CD synthesizer. No arbitrary or hidden command execution was detected in the skill's own logic.
Audit Metadata