github-actions
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of shell commands within workflow steps for tasks like package installation (npm ci), testing (npm test), and deployment (npx vercel deploy).\n- [EXTERNAL_DOWNLOADS]: The documentation references official GitHub Actions and popular community actions like appleboy/ssh-action for common automation tasks.\n- [DYNAMIC_EXECUTION]: Provides examples of using actions/github-script to execute inline JavaScript for interacting with the GitHub API during workflow execution.\n- [SAFE]: The skill follows security best practices for GitHub Actions, including recommending the use of GitHub Secrets and pinning action versions to specific tags or SHAs.
Audit Metadata