github-actions

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation and template resource for GitHub Actions. It does not contain any executable code or instructions that would compromise the agent or the host system.
  • [SAFE]: All external references and GitHub Actions mentioned (e.g., actions/checkout, actions/setup-node, docker/build-push-action, aws-actions/configure-aws-credentials) are from trusted organizations or well-known, reputable community maintainers.
  • [SAFE]: The skill promotes strong security posture by including a 'Security Considerations' section that warns against common pitfalls like shell injection from untrusted event data, over-privileged tokens, and unpinned actions.
  • [SAFE]: Sensitive information such as API keys, tokens, and IAM roles are represented using standard placeholders (e.g., {{ secrets.API_KEY }}), following best practices for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 05:36 AM