ci-cd-and-automation
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as an instructional resource for CI/CD best practices and does not contain any malicious instructions or obfuscated code.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of standard industry tools and dependencies through official package managers (npm, npx) and well-known GitHub Actions (actions/checkout, actions/setup-node).
- [COMMAND_EXECUTION]: Includes standard CI/CD commands for linting, testing, and building applications (e.g.,
npm test,npm audit,npx playwright test). These are appropriately scoped to the intended purpose of the skill. - [CREDENTIALS_UNSAFE]: Correctly demonstrates the implementation of secrets management by using GitHub Secrets placeholders (e.g.,
${{ secrets.VERCEL_TOKEN }}) instead of hardcoding sensitive information.
Audit Metadata