tutorial-writer-github-pages
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates for GitHub Actions workflows using official and well-known actions such as 'actions/checkout', 'actions/setup-node', and 'withastro/action'.
- [SAFE]: Instructions for secret management emphasize using GitHub Secrets rather than hardcoding credentials, which is a standard security best practice in CI/CD environments.
- [SAFE]: The skill includes guidance on security hardening, such as configuring a Content Security Policy (CSP) and setting up Dependabot for dependency security scanning.
- [SAFE]: All referenced npm packages and Starlight plugins are standard tools within the Astro/Starlight ecosystem or from well-known services like Sentry and GitHub.
- [SAFE]: No obfuscation, prompt injection, or unauthorized command execution patterns were found in the instructions or reference files. The shell commands provided are for local development and standard build/deployment processes.
Audit Metadata