kf-g-github-actions-self-hosted-ci-cache
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using
jdx/mise-action@v3, a standard and widely-used GitHub Action for installing development tools. This is a common and expected dependency for the described CI/CD optimization tasks. - [COMMAND_EXECUTION]: The instructions involve standard GitHub Actions shell commands to manage environment variables and directory structures within the runner's tool cache. These operations are scoped to the runner's environment and follow standard DevOps practices.
- [PROMPT_INJECTION]: The skill establishes patterns for the agent to ingest repository data and generate CI/CD configurations (Indirect Prompt Injection surface).
- Ingestion points: Repository workflow files (
.github/workflows/*.yml) and mise configuration files (mise.*.toml). - Boundary markers: The instructions do not explicitly provide boundary markers for untrusted content, relying on standard YAML and TOML structure parsing.
- Capability inventory: Includes shell command execution via GHA
runsteps, execution of local Node.js scripts, and task execution viamise run. - Sanitization: The skill provides static templates for configuration, minimizing dynamic interpolation risks.
Audit Metadata