cicd-deployment
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements several industry-standard security practices, including the use of non-root users in Docker containers and managing services through user-level systemd units to limit potential impact on the host system.
- [COMMAND_EXECUTION]: Provides templates for shell scripts (
deploy.sh,rollback.sh,health_check.sh) to automate service lifecycle management on a remote VPS. These scripts include robust error handling via shell options (set -euo pipefail). - [EXTERNAL_DOWNLOADS]: Orchestrates the installation of software dependencies through official package managers (
pip,npm) and utilizes the legitimate Telegram Bot API for real-time deployment notifications. - [CREDENTIALS_UNSAFE]: Includes explicit instructions and best practices for protecting sensitive information, including the use of
.gitignoreto prevent secret leakage and the utilization of GitHub Secrets for sensitive deployment keys.
Audit Metadata