ov-github-actions-ci
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical instructions and checklists for maintaining GitHub Actions workflows. It promotes high-security standards by mandating that third-party actions be pinned to full commit SHAs and that workflows use least-privilege GITHUB_TOKEN permissions.
- [SAFE]: The instructions explicitly include defenses against shell injection in CI pipelines, advising the user/agent to route untrusted
github.eventdata through environment variables rather than direct string interpolation. - [SAFE]: No instances of obfuscation, hardcoded credentials, or malicious persistence mechanisms were detected. External references point to official GitHub documentation or vendor-managed resources (Azure Container Registry).
Audit Metadata