ci-test-job-conventions
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a documentation-based reference that promotes secure CI/CD practices. It includes explicit instructions to use platform-native secret stores and warns against committing credentials to version control or using unsafe shell commands like
set -xwith secrets.\n- [EXTERNAL_DOWNLOADS]: The skill references well-known services and tools such as Codecov and specific GitHub Actions (e.g.,dorny/test-reporter). These are standard integrations in modern software development pipelines and are documented neutrally for legitimate usage.\n- [COMMAND_EXECUTION]: Provides example shell snippets and configuration blocks for various testing frameworks (Jest, Pytest, Maven, etc.) to help users generate standardized JUnit XML reports. These snippets are illustrative and intended for inclusion in the user's own build scripts.
Audit Metadata