ci-cd-github-actions-rails
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several official GitHub Actions from trusted organizations to handle environment setup and deployments, including
actions/checkout,ruby/setup-ruby,actions/setup-node,docker/login-action, andaws-actions/configure-aws-credentials. - [COMMAND_EXECUTION]: Defines standard development and deployment commands for the Ruby on Rails ecosystem, such as
bundle exec kamal deploy,bin/rails db:prepare, andbin/rspec. These are executed within the context of a GitHub Actions runner. - [CREDENTIALS_SAFE]: The templates demonstrate secure secret handling by utilizing the GitHub Secrets store (e.g.,
${{ secrets.GITHUB_TOKEN }}) rather than hardcoding credentials. It explicitly instructs users to avoid static AWS keys in favor of OIDC roles. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a template generator for CI/CD configurations. While user-provided inputs (like application names) are interpolated into the templates, the use of standard GitHub Actions context variables and environment gates limits the risk of data-driven injection attacks during the generation phase.
Audit Metadata