aif-ci
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template-driven generator for CI/CD configurations. It utilizes standard development tools (Glob, Grep, Bash, Write) to analyze project structures and produce YAML files.
- [SAFE]: External references and actions (e.g.,
shivammathur/setup-php,actions/setup-node,astral-sh/setup-uv) are well-known, official, or widely trusted community actions used for environment setup. - [SAFE]: The skill explicitly enforces security best practices in its generated output, such as setting
permissions: contents: readin GitHub Actions to adhere to the principle of least privilege. - [SAFE]: No obfuscation, data exfiltration, or malicious command execution patterns were detected. The
Bashtool usage is restricted togit *operations viaallowed-toolsin the frontmatter, limiting its scope to repository analysis.
Audit Metadata