cicd
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation, guidelines, and templates for CI/CD pipelines. No malicious execution patterns or exfiltration attempts were detected.
- [SAFE]: The content promotes high security standards, such as pinning GitHub Actions by commit SHA and enforcing least-privilege permissions for CI jobs.
- [SAFE]: It provides specific guidance on avoiding template injection by using environment variables instead of direct expression interpolation in workflow scripts.
- [SAFE]: External dependencies and tools referenced (such as
cosign,syft, and official GitHub actions) are well-known and trusted within the security community.
Audit Metadata