ci-cd-pipelines
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent instructions or bypass safety filters were found in the text or metadata.
- [DATA_EXFILTRATION]: The skill does not contain any code or instructions for accessing sensitive files (like SSH keys or credentials) or exfiltrating data to external servers.
- [REMOTE_CODE_EXECUTION]: The provided pipeline examples use standard build tools (npm, serverless) in a controlled manner typical for CI/CD environments. There are no patterns involving the execution of remote scripts from untrusted sources via curl or bash.
- [OBFUSCATION]: All content is in plain text. No Base64 encoding, zero-width characters, or other obfuscation techniques were detected.
- [COMMAND_EXECUTION]: Shell commands present in the YAML and Groovy examples are standard development commands (e.g., npm test, npm build) intended for documentation purposes.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or private keys were found. The skill correctly identifies using secrets and variables as a security best practice.
Audit Metadata