ci-score
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a local static analysis tool that parses GitHub Actions workflow files using PyYAML's safe loader and generates grading reports based on a predefined pass/fail rubric.
- [SAFE]: Shell command execution is limited to specific git plumbing calls (e.g., git rev-parse, git status) used to establish the provenance of the repository being scored, with no user-controlled injection paths detected.
- [SAFE]: The skill includes a dedicated verification script (scripts/verify_report.py) that acts as an integrity check to ensure that the agent correctly presents findings without hallucination or unauthorized modification of the data.
- [SAFE]: All external documentation links and resource references point to official vendor domains (starsling.dev) or established developer documentation sites for GitHub Actions.
Audit Metadata