github-actions-pipeline-creator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and templates for GitHub Actions workflows. All referenced actions (actions/checkout, actions/setup-node, actions/upload-artifact, docker/setup-buildx-action, amondnet/vercel-action, etc.) are official GitHub actions or widely used community tools for development workflows.
- [SAFE]: Secret handling in the provided examples follows security best practices, using
${{ secrets.VARIABLE_NAME }}syntax to reference sensitive values rather than hardcoding credentials. - [SAFE]: Network operations described (npm install, docker login, vercel deploy) are standard components of CI/CD pipelines and are directed toward well-known, trusted service providers.
- [SAFE]: The instructions do not contain prompt injections, obfuscation, persistence mechanisms, or unauthorized privilege escalation. The
github-scriptusage is localized to posting PR comments on failure, which is a standard notification pattern.
Audit Metadata