ci-cd-pipeline
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary focus is promoting secure DevOps practices. It includes explicit rules and examples that forbid hardcoding secrets and mandate the use of official CI/CD secret stores.
- [EXTERNAL_DOWNLOADS]: The configuration examples reference official GitHub Actions (
actions/checkout,actions/setup-node) and Fly.io's official deployment action (superfly/flyctl-actions). These are recognized well-known services and do not pose a security risk in this context. - [CREDENTIALS_UNSAFE]: The skill identifies the risk of hardcoded credentials and uses a dummy placeholder token (
fo1_abc123secret) in a clearly labeled 'Bad Example' to educate users on what to avoid. This is a secure instructional method. - [SAFE]: The skill implements a secure-by-default logic, requiring production deployments to be gated by successful staging tests and manual approvals.
Audit Metadata