ci-cd
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional guidance and templates for DevOps workflows without including executable scripts or risky automation tools.
- [SAFE]: It promotes strong security posture by instructing users to use platform-native Secrets management instead of hardcoding credentials.
- [SAFE]: It specifically warns against supply chain attacks by recommending the use of specific commit SHAs for third-party GitHub Actions.
- [SAFE]: No evidence of prompt injection, obfuscation, or data exfiltration was found in the instructions or metadata.
- [SAFE]: The skill correctly identifies its own boundaries, noting that it can only generate configuration text and cannot directly modify platform settings or access actual secret values.
Audit Metadata