ci-cd-and-automation
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational templates for GitHub Actions workflows, which are standard for automation in software development.
- [SAFE]: It emphasizes security best practices by instructing users to store sensitive credentials in GitHub Secrets or dedicated vaults rather than hardcoding them in configuration files.
- [SAFE]: The skill incorporates security scanning tools like
npm auditinto the build pipeline examples. - [SAFE]: The 'Feeding CI Failures Back to Agents' section provides a prompt template for debugging; while processing build logs is an ingestion point for external data, the workflow is presented as a manual developer-led recovery process.
- [SAFE]: All external tools and services referenced (Vercel, Playwright, Prisma, GitHub Actions) are well-known technology services and official package providers.
Audit Metadata