deployment-checklist-generator
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The smoke-tests.sh script template contains hardcoded authentication credentials (email: test@example.com and password: test123) for testing login functionality. Hardcoding credentials, even for testing, is a security risk if not replaced with environment-specific secrets.
- [EXTERNAL_DOWNLOADS]: The deployment workflow template (deploy.yml) references the third-party GitHub Action trstringer/manual-approval@v1. Using third-party actions from unverified organizations can introduce supply chain risks.
- [COMMAND_EXECUTION]: The skill generates templates that perform shell command execution and network operations using curl in CI/CD environments and smoke test scripts, which involves interacting with remote endpoints and processing local shell scripts like backup-db.sh and deploy.sh.
Recommendations
- AI detected serious security threats
Audit Metadata