cicd-pipeline-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive educational resource for CI/CD best practices and design patterns, containing templates and guidelines rather than autonomous code.
- [COMMAND_EXECUTION]: The skill includes various shell command and YAML configuration examples for tools like
kubectl,terraform,aws-cli, andnpm. These are provided as illustrative templates for common DevOps tasks. - [EXTERNAL_DOWNLOADS]: The skill references official and widely-used GitHub Actions and security tools (e.g.,
trivy,cosign). It explicitly promotes secure usage through immutable SHA pinning and provides examples of using these tools in a pipeline context. - [DATA_EXFILTRATION]: A template script demonstrates how to report test failures to a custom URL via a POST request. This is a legitimate logging practice for build health monitoring and utilizes variables intended to be configured for a user's own infrastructure.
Audit Metadata