pipeline-blueprint

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard CI/CD templates for various project types (frontend, backend, libraries, etc.) and follows industry security best practices.
  • [SAFE]: No hardcoded credentials or sensitive data exposure detected. The templates correctly utilize platform-specific secret management (e.g., GitHub Secrets, GitLab CI Variables) and avoid exposing private keys or tokens.
  • [SAFE]: External dependencies, such as GitHub Actions (e.g., actions/checkout, actions/setup-node) and Docker images (e.g., node:20-slim, postgres:16), are sourced from well-known and trusted official repositories.
  • [SAFE]: The skill explicitly includes a security checklist advising users to audit third-party actions, rotate secrets, and enable dependency scanning.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 08:59 AM