github-actions-ci
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes several official and well-known GitHub Actions to perform CI/CD tasks. These include:
actions/checkout@v4(Official GitHub action)actions/setup-node@v4(Official GitHub action)pnpm/action-setup@v4(Official pnpm action)aws-actions/configure-aws-credentials@v4(Official Amazon Web Services action)- [COMMAND_EXECUTION]: Provides standard shell command patterns for CI tasks such as dependency installation, type checking, linting, testing, and deployment (e.g.,
pnpm install,npm test,aws s3 sync). - [SAFE]: The skill serves as a security-positive guide by recommending industry best practices, such as:
- Using OIDC (OpenID Connect) for cloud provider authentication to avoid storing long-lived credentials in secrets.
- Implementing least-privilege principles by restricting
GITHUB_TOKENpermissions. - Mitigating supply chain risks by pinning actions to specific versions or SHAs.
- Preventing shell injection attacks by correctly quoting variables derived from untrusted input like PR titles or branch names.
Audit Metadata