deployment-pipeline-design
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource for pipeline design. All provided code snippets for GitHub Actions, GitLab CI, Azure Pipelines, and Kubernetes represent standard industry practices.
- [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted tools such as Trivy for security scanning and Flagsmith for feature flag management. These are standard integrations in modern deployment workflows.
- [DATA_EXFILTRATION]: While the skill includes network operations (curl), they are used for legitimate purposes such as health checks, Prometheus metric queries, and Slack notifications via properly managed secrets (e.g.,
${{ secrets.SLACK_WEBHOOK }}). - [CREDENTIALS_UNSAFE]: The skill follows security best practices by using placeholders like
API_KEYand environment secret variables rather than hardcoding sensitive credentials.
Audit Metadata