motoko-github-ci-workflow
Pass
Audited by Gen Agent Trust Hub on May 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill instructions or provided examples.
- [EXTERNAL_DOWNLOADS]: The skill setup involves standard GitHub Actions such as
actions/checkout,actions/setup-node,caffeinelabs/setup-mops, anddfinity/setup-dfx. These are established tools for CI/CD. - [EXTERNAL_DOWNLOADS]: The workflow template includes a step to download the
didcbinary from Dfinity's official GitHub releases. Dfinity is the creator of the Motoko language, making this a trusted source. - [COMMAND_EXECUTION]: The skill uses appropriate CLI tools (
mops,npm,dfx,icp-cli) to automate testing, formatting, and building tasks. These commands are localized to the CI environment and align with the skill's purpose.
Audit Metadata