cicd-integration

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides templates for GitHub Actions, GitLab CI, and other platforms. It acts as a static configuration generator and does not execute these pipelines or perform any network or file system operations itself.
  • [SAFE]: The generated configurations rely on official GitHub Actions from the 'actions' organization and reputable services like Chromatic and Style Dictionary.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface for indirect prompt injection by reading project-specific configuration files such as .ds-ops-config.yml. 1. Ingestion points: Local project configuration files and file system paths. 2. Boundary markers: None identified. 3. Capability inventory: The skill has the capability to generate new YAML and JavaScript files in the repository. 4. Sanitization: No explicit sanitization is described, as the generated output is intended for manual review and subsequent execution in the user's controlled CI environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 08:20 PM