github-actions-advanced
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill instructs the agent to educate users on critical security hardening measures, including pinning third-party actions to immutable commit SHAs to prevent supply chain attacks and using environment variables to mitigate shell injection risks from untrusted pull request metadata.
- [EXTERNAL_DOWNLOADS]: The skill references and suggests various GitHub Actions and tools for CI/CD tasks. All mentioned resources originate from trusted organizations (e.g., GitHub, AWS, Google, Docker) or well-known, reputable community repositories, and their use is consistent with standard, safe development practices.
- [COMMAND_EXECUTION]: The skill uses standard shell commands like
findandlsfor repository structure discovery and tech-stack detection. These operations are read-only and necessary for providing context-aware CI/CD recommendations.
Audit Metadata