github-actions-setup
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates a GitHub Actions workflow file (
.github/workflows/stably-e2e.yml) that executes shell commands for corepack activation, dependency installation, and running tests via thestablyCLI. - [EXTERNAL_DOWNLOADS]: The generated CI workflow includes steps to download browser binaries and system-level dependencies for Playwright using the
stably install --with-depscommand. - [SAFE]: Demonstrates secure credential handling by explicitly instructing users to store API keys and project IDs in GitHub Secrets rather than hardcoding them in the workflow file.
- [SAFE]: The skill performs local project detection by reading configuration files (
package.json, lockfiles,playwright.config.ts) to ensure the generated workflow matches the user's environment.
Audit Metadata