gitlab-ci-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard Docker images from well-known and trusted providers including HashiCorp (terraform), Bitnami (kubectl), and Aqua Security (trivy). These are standard industry tools for CI/CD automation.
- [DYNAMIC_EXECUTION]: The skill documents GitLab's native 'Dynamic Child Pipelines' feature. This involves generating a YAML configuration file via a script at runtime and then triggering it as a sub-pipeline. This is a standard architectural pattern for complex CI/CD workflows and is documented here for its legitimate use case.
- [INDIRECT_PROMPT_INJECTION]: As the skill demonstrates dynamic generation of pipeline code, it identifies an ingestion point where untrusted data could theoretically influence generated instructions.
- Ingestion points: Output from
generate_pipeline.pyinSKILL.md. - Boundary markers: None present in the documentation example.
- Capability inventory: File writing (redirection) and pipeline triggering.
- Sanitization: Not applicable as this is a documentation template, though users should ensure their generator scripts sanitize external inputs.
Audit Metadata