github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of standard documentation and templates for GitHub Actions workflow automation with no evidence of malicious patterns.
- [EXTERNAL_DOWNLOADS]: The provided templates reference various GitHub Actions from well-known and official organizations, including
actions/,aws-actions/,docker/,github/,aquasecurity/,snyk/, andslackapi/. These are recognized as trusted sources for development automation tools. - [COMMAND_EXECUTION]: The workflow snippets include common shell commands such as
npm ci,pytest,aws eks, andkubectl apply. These are intended for execution within the secure and ephemeral environment of a GitHub Actions runner for development and deployment purposes. - [CREDENTIALS_UNSAFE]: The skill correctly demonstrates the use of GitHub's encrypted secrets mechanism (e.g.,
${{ secrets.AWS_ACCESS_KEY_ID }},${{ secrets.GITHUB_TOKEN }}) for managing sensitive information, which is the recommended security practice for these workflows. No hardcoded credentials or secrets were identified.
Audit Metadata