actions-ci-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends several external resources for use in GitHub Actions workflows, such as official actions from the 'actions' and 'pnpm' organizations, and Docker images from Microsoft ('mcr.microsoft.com/playwright'). These are references to well-known and trusted services.- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to audit local repository content, specifically GitHub Action workflow files. Ingestion points: .github/workflows/*.yml files and GitHub Action run logs via the GitHub CLI. Boundary markers: None. Capability inventory: Uses the GitHub CLI ('gh') to list and view workflow runs and logs; no dynamic execution of content. Sanitization: Focuses on static analysis of configuration files.- [NO_CODE]: The skill consists entirely of markdown-based instructions and does not bundle any executable scripts or binaries.
Audit Metadata