github-actions-pnpm-ci
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard build and test commands (e.g.,
pnpm install,pnpm build,pnpm test). These are expected for a CI/CD skill. - [EXTERNAL_DOWNLOADS]: The skill uses well-known GitHub Actions (
actions/checkout,pnpm/action-setup,actions/setup-node) and standard developer tools (actionlint,playwright). All GitHub Actions are pinned to full commit SHAs, which is a security best practice to prevent supply chain attacks. - [SAFE]: The skill incorporates several security best practices, including pinning remote actions to full commit SHAs, recommending
pnpm integritychecks, using--frozen-lockfile, and enforcing minimal CI token permissions (contents: read).
Audit Metadata