gitlab-ci-test-jobs
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as a comprehensive guide for standardizing GitLab CI/CD pipelines, covering common tasks like parallel jobs, service configuration, and artifact reporting.
- [NO_CODE]: The skill consists entirely of markdown documentation and YAML configuration templates. It does not contain any executable scripts, binaries, or active code, which significantly limits the potential attack surface.
- [CREDENTIALS_UNSAFE]: Step 3 includes a hardcoded password example (
POSTGRES_PASSWORD: test) for a database service. However, the value 'test' is used as a functional placeholder for ephemeral CI services, and the skill explicitly mitigates this risk in Step 9 and the 'Anti-patterns' section by instructing users to store sensitive credentials in masked and protected GitLab CI/CD Variables rather than hardcoding them in the repository.
Audit Metadata