cicd-integration
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates for GitHub Actions, GitLab CI, and other platforms. It acts as a static configuration generator and does not execute these pipelines or perform any network or file system operations itself.
- [SAFE]: The generated configurations rely on official GitHub Actions from the 'actions' organization and reputable services like Chromatic and Style Dictionary.
- [INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface for indirect prompt injection by reading project-specific configuration files such as .ds-ops-config.yml. 1. Ingestion points: Local project configuration files and file system paths. 2. Boundary markers: None identified. 3. Capability inventory: The skill has the capability to generate new YAML and JavaScript files in the repository. 4. Sanitization: No explicit sanitization is described, as the generated output is intended for manual review and subsequent execution in the user's controlled CI environment.
Audit Metadata