ci-cd-and-automation
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill encourages a workflow where raw CI failure logs are pasted into the agent's context to facilitate debugging. This establishes a surface for indirect prompt injection, as failure logs could potentially contain malicious instructions embedded in untrusted inputs that caused the build or test failure.
- Ingestion points: CI failure output pasted into the agent (SKILL.md).
- Boundary markers: The skill does not provide instructions for using delimiters or warnings to ignore instructions within the logs.
- Capability inventory: The agent is tasked with modifying source code, executing build/test commands, and pushing updates.
- Sanitization: No sanitization or filtering of the logs is suggested before ingestion.
- [EXTERNAL_DOWNLOADS]: The skill references official GitHub Actions from the
actionsorganization and configuration tools from well-known services such as Vercel. These are standard, trusted sources for CI/CD workflows. - [COMMAND_EXECUTION]: The skill provides templates for executing standard package management and deployment commands (
npm,npx,vercel). These commands are necessary for the skill's primary function of CI/CD automation and do not show signs of misuse.
Audit Metadata