github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The workflow templates reference official GitHub Actions from well-known organizations including GitHub (actions/checkout, actions/setup-node), AWS (aws-actions/configure-aws-credentials), Docker (docker/login-action), Snyk, and Aqua Security. These are established services and their use within CI/CD templates is standard practice.
- [COMMAND_EXECUTION]: The templates include shell commands for common development tasks such as dependency installation (
npm ci,pip install), infrastructure configuration (aws eks update-kubeconfig), and application deployment (kubectl apply). These commands are encapsulated within standard CI/CD workflow patterns. - [SAFE]: The skill demonstrates safe credential handling by using GitHub Actions secret syntax (e.g.,
${{ secrets.AWS_ACCESS_KEY_ID }}) instead of hardcoding sensitive information. No malicious obfuscation, persistence mechanisms, or privilege escalation patterns were detected.
Audit Metadata