audit-cicd
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) and its API to perform administrative tasks, including listing repositories, auditing workflow run history, and querying storage usage for artifacts and caches. - [COMMAND_EXECUTION]: Includes automation patterns for cleaning up CI storage using
xargsand thegh api -X DELETEcommand. These are identified in the documentation as destructive actions requiring explicit user confirmation before execution. - [COMMAND_EXECUTION]: Instructs the agent to verify branch protection settings and workflow status checks using the GitHub API to ensure that optimizations do not break deployment safety.
- [DATA_EXPOSURE]: Accesses repository metadata such as visibility (private/public), activity dates, and storage metrics to identify cost drivers. This data access is aligned with the skill's primary function of cost auditing.
Audit Metadata