skills/lwlee2608/genesis/genesis-cicd/Gen Agent Trust Hub

genesis-cicd

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes official GitHub Actions and tools from trusted providers and well-known services, including GitHub (actions/*), Google (google-github-actions/*), Microsoft (azure/*), and Docker (docker/*), as well as specialized CI runners from Blacksmith.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests information from the local project environment, such as service directory names, go.mod, and pnpm-lock.yaml, to correctly configure build and test parameters in the generated workflow file.
  • [COMMAND_EXECUTION]: The workflow generation includes a verification procedure that uses actionlint and python3 with pyyaml to validate the syntax and structure of the produced CI configuration file.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 06:58 AM
Security Audit — agent-trust-hub — genesis-cicd