github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill templates reference several GitHub Actions from well-known services and organizations, including GitHub (actions/checkout, actions/setup-node, actions/setup-python), AWS (aws-actions/configure-aws-credentials), and Docker (docker/login-action, docker/build-push-action). It also includes security scanning actions from Aqua Security and Snyk. These are standard and trusted integrations for CI/CD.\n- [COMMAND_EXECUTION]: The templates provide examples of shell commands like npm ci, pytest, and kubectl operations. These commands are necessary for the skill's purpose of automating testing and deployment and are executed within a restricted GitHub Actions environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill acts as a repository of static workflow templates.\n
- Ingestion points: No runtime data ingestion is performed by the skill; it provides static documentation templates.\n
- Boundary markers: Not applicable as the skill does not interpolate external data.\n
- Capability inventory: The documented templates include commands for building Docker images and managing Kubernetes clusters using secrets and network access.\n
- Sanitization: Not applicable as the skill content is static documentation.
Audit Metadata