dagger
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves its primary purpose of documenting Dagger CI/CD pipelines without introducing malicious patterns.
- [EXTERNAL_DOWNLOADS]: Recommends installing the Dagger CLI through the official repository on Homebrew, which is a well-known and trusted source for developers.
- [COMMAND_EXECUTION]: Defines pipeline steps that execute standard development commands like npm install and npm run test within isolated OCI containers as part of the intended containerized CI/CD workflow.
- [CREDENTIALS_UNSAFE]: Explicitly provides instructions on how to handle secrets securely using Dagger's internal Secret type, which prevents sensitive information from being stored in container metadata or image layers.
Audit Metadata