ci-cd
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands like
lsandgrepto detect project frameworks and package managers. It also utilizes the GitHub CLI (gh) to view failure logs and monitor workflow runs. These actions are appropriate for the skill's purpose of managing development pipelines. - [EXTERNAL_DOWNLOADS]: The generated CI/CD configurations reference well-known and official GitHub Actions from trusted organizations, including GitHub (
actions/), Docker (docker/), Vercel (amondnet/vercel-action), and the Python Packaging Authority (pypa/). These dependencies are standard in modern software automation. - [SAFE]: No malicious patterns such as prompt injection, unauthorized data exfiltration, or code obfuscation were found. The troubleshooting logic (
/ci-cd fix) includes a safety-oriented three-attempt limit for automated fixes, ensuring the agent escalates to the user rather than entering an infinite execution loop.
Audit Metadata