github-actions-docs
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation files (.md) designed to assist an AI agent in understanding and generating GitHub Actions workflows.
- [COMMAND_EXECUTION]: The documentation includes numerous examples of shell commands used within GitHub Actions environments or for runner configuration.
- Evidence: Examples in
managing.md,runners.md, andadvanced.mddemonstrate the use ofcurl,tar,git, andgh(GitHub CLI). - Context: These commands are provided as reference material for educational purposes and are not instructions for the agent to execute on the local host.
- [EXTERNAL_DOWNLOADS]: The documentation provides links to official GitHub repositories and package releases.
- Evidence:
runners.mdincludes a URL for downloading the GitHub Actions runner binary from the officialgithub.com/actions/runnerrepository. - Context: This download is from a well-known, trusted source and is described as part of a manual setup process for self-hosted runners.
- [CREDENTIALS_UNSAFE]: The documentation describes best practices for secret management and includes examples using the GITHUB_TOKEN and other placeholder secrets.
- Evidence:
security-reuse.mdandadvanced.mdexplain how to configure and access encrypted secrets using the${{ secrets.SECRET_NAME }}syntax. - Context: No actual secrets, API keys, or private credentials are hardcoded in the skill content; examples use standard placeholders.
Audit Metadata