kstack-github-actions
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-only resource providing instructional guidelines for GitHub Actions. It contains no executable scripts, shell commands, or network operations.
- [SAFE]: External references are limited to standard, well-known GitHub Actions (actions/checkout, actions/cache) and common developer tools (Docker, Bun, Node), which are used appropriately in examples.
- [INDIRECT_PROMPT_INJECTION]: While the skill defines how an agent should process untrusted workflow data, it does not include instructions that would bypass safety filters or exfiltrate data. It acts as a set of constraints for the agent's behavior during code review or generation tasks.
Audit Metadata