ci-generate
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands (e.g., python3, gitlab-ci-lint, circleci) to validate the syntax and structure of the generated CI/CD configuration files. These operations are restricted to validation and do not involve executing external or untrusted code.
- [DYNAMIC_EXECUTION]: The skill performs dynamic YAML validation using python3 -c with yaml.safe_load. This is the industry-standard approach for safe YAML parsing and prevents the execution of arbitrary code during the loading process.
- [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration files (such as package.json) to detect build and test commands. While this involves ingesting untrusted data, the risk is mitigated by the skill's focus on specific configuration keys and subsequent syntax validation of the generated output.
Audit Metadata