supply-chain
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is purely instructional and promotes established security best practices such as dependency vetting, artifact signing, and pipeline permission hardening.
- [EXTERNAL_DOWNLOADS]: The provided examples reference official GitHub Actions and reputable security utilities like the CycloneDX generator and Google's OSV-Scanner, all of which are trusted industry resources.
Audit Metadata