devops-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified.
- [CREDENTIALS_UNSAFE]: The skill demonstrates secure handling of credentials by utilizing environment variables and GitHub Secrets placeholders (e.g.,
${{ secrets.AWS_ACCESS_KEY_ID }}) instead of hardcoding sensitive information. - [EXTERNAL_DOWNLOADS]: The GitHub Actions workflow references official actions from trusted organizations such as 'actions' and 'aws-actions'.
- [DATA_EXFILTRATION]: A Telegram notification step is included in the deployment pipeline, which is a standard operational practice and uses secure secret references.
Audit Metadata