ci-cd-pipeline-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and boilerplate templates for CI/CD workflows without executing any malicious code or requesting sensitive permissions beyond its scope.
- [SAFE]: Hardcoded credentials found in the code blocks are explicitly marked as "Bad" examples for educational purposes or refer to local test service defaults (e.g.,
postgres:postgres) commonly used in isolated CI environments. - [SAFE]: External dependencies and GitHub Actions referenced in the examples belong to trusted organizations or well-known services, including AWS, Docker, Vercel, Netlify, HashiCorp, and GitHub's own official actions.
- [SAFE]: The skill includes proactive security guidance, such as warning against indirect shell injection via untrusted event data and recommending the pinning of action versions to immutable commit SHAs.
Audit Metadata