ci-cd-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional templates for GitHub Actions workflows including Kotlin/Micronaut and Next.js projects.
- [SAFE]: All remote actions referenced, such as
actions/checkout,actions/setup-java,docker/build-push-action, anddependabot/fetch-metadata, belong to well-known services and trusted organizations. - [SAFE]: Hardcoded database credentials (e.g.,
POSTGRES_PASSWORD: test) found in theworkflows.mdtemplate are specifically scoped to a local service container for testing environments and do not expose sensitive production data. - [SAFE]: The skill follows security best practices by explicitly instructing the user to store secrets in GitHub Secrets and never in the code.
- [SAFE]: No obfuscation, malicious prompt injections, or unauthorized remote code execution patterns were detected in the provided files.
Audit Metadata