deployment-devops-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource, providing YAML templates for GitHub Actions workflows and shell commands for deployment management.
- [SAFE]: All identified external dependencies are either official GitHub Actions (e.g.,
actions/checkout,actions/setup-node) or well-known, reputable services (e.g., Chromatic for visual testing, Codecov for coverage reports). - [SAFE]: The examples demonstrate secure credential handling by using platform secrets (e.g.,
secrets.NPM_TOKEN,secrets.SLACK_WEBHOOK) instead of hardcoding sensitive information. - [SAFE]: Network operations are restricted to communication with established services such as the npm registry and Slack, consistent with the skill's stated purpose of deployment and monitoring.
Audit Metadata