ci-workflow-sync

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to download MongoDB binaries from the official MongoDB download server for use in testing environments.\n
  • Evidence: Pattern 11 in SKILL.md contains a curl command targeting https://fastdl.mongodb.org to fetch database binaries.\n- [COMMAND_EXECUTION]: The skill provides logic for generating and executing shell commands within CI workflows to handle environment setup, container builds, and test execution.\n
  • Evidence: Various patterns in SKILL.md describe run steps for setting variables, writing configuration files, and executing docker/buildx commands.\n- [SAFE]: The skill includes security-conscious instructions to strip GitHub-specific capabilities, such as SLSA attestations and high-privilege write permissions, when adapting workflows for an internal Forgejo environment.\n
  • Evidence: Pattern 4 and the "Before/After" example in SKILL.md demonstrate removing attestations: write and id-token: write permissions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 09:46 AM
Security Audit — agent-trust-hub — ci-workflow-sync