github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource providing templates for GitHub Actions. It does not contain any executable scripts, command-line instructions, or platform-specific injections.
- [SAFE]: External actions referenced in the templates (e.g., from AWS, Docker, Snyk, and GitHub) are standard, well-known DevOps tools. The templates correctly advocate for the use of secrets (e.g., GITHUB_TOKEN, AWS_ACCESS_KEY_ID) rather than hardcoded credentials.
- [SAFE]: The skill explicitly includes a 'Workflow Best Practices' section that recommends security measures such as version pinning and using approval gates for production environments.
Audit Metadata