testing-cicd-init

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automates the installation of standard, industry-recognized development dependencies including vitest, @testing-library/react, and jsdom through the Bun package manager.
  • [COMMAND_EXECUTION]: Generates GitHub Actions workflows (.github/workflows/ci.yml) that execute routine project lifecycle commands such as bun install, bun test, and bun run build.
  • [DATA_EXFILTRATION]: Generated CI templates include an integration with the official codecov/codecov-action to upload code coverage metadata to Codecov, a well-known third-party service for software testing metrics.
  • [CREDENTIALS_UNSAFE]: Configuration templates utilize a hardcoded connection string (mongodb://localhost:27017/test) intended specifically for ephemeral local testing containers and isolated CI service environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 07:31 AM