github-actions
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and template resource for GitHub Actions. It does not contain any executable code or instructions that would compromise the agent or the host system.
- [SAFE]: All external references and GitHub Actions mentioned (e.g., actions/checkout, actions/setup-node, docker/build-push-action, aws-actions/configure-aws-credentials) are from trusted organizations or well-known, reputable community maintainers.
- [SAFE]: The skill promotes strong security posture by including a 'Security Considerations' section that warns against common pitfalls like shell injection from untrusted event data, over-privileged tokens, and unpinned actions.
- [SAFE]: Sensitive information such as API keys, tokens, and IAM roles are represented using standard placeholders (e.g.,
{{ secrets.API_KEY }}), following best practices for secret management.
Audit Metadata