ci-cd-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource for DevOps best practices. The provided code blocks (YAML for CI pipelines, HCL for Terraform, and Shell scripts) are static examples intended for instructional purposes.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or private credentials were found. The skill explicitly promotes security best practices, such as using secret management tools (Vault, AWS Secrets Manager) and avoiding the logging of secrets.
- [OBFUSCATION]: No malicious obfuscation, hidden characters, or homoglyph attacks were detected. The use of Base64 decoding in a script snippet is a technical example for handling CI/CD environment variables, not an attempt to hide malicious code.
- [COMMAND_EXECUTION]: While the skill contains shell commands (e.g.,
npm audit,kubectl,chmod), these are embedded in markdown code blocks as part of the documentation and are not designed to be executed by the agent in the local environment.
Audit Metadata