ci-workflow-sync
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download MongoDB binaries from the official MongoDB download server for use in testing environments.\n
- Evidence: Pattern 11 in
SKILL.mdcontains acurlcommand targetinghttps://fastdl.mongodb.orgto fetch database binaries.\n- [COMMAND_EXECUTION]: The skill provides logic for generating and executing shell commands within CI workflows to handle environment setup, container builds, and test execution.\n - Evidence: Various patterns in
SKILL.mddescriberunsteps for setting variables, writing configuration files, and executing docker/buildx commands.\n- [SAFE]: The skill includes security-conscious instructions to strip GitHub-specific capabilities, such as SLSA attestations and high-privilege write permissions, when adapting workflows for an internal Forgejo environment.\n - Evidence: Pattern 4 and the "Before/After" example in
SKILL.mddemonstrate removingattestations: writeandid-token: writepermissions.
Audit Metadata