Workflow Automation
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes automation templates that execute various command-line tools such as
docker,helm,kubectl,npm, andaz. These commands are standard for the skill's stated purpose of implementing CI/CD pipelines and deployment processes. - [EXTERNAL_DOWNLOADS]: The provided GitHub Action workflows reference several third-party actions from reputable organizations including GitHub (CodeQL), Microsoft (Azure Login, Setup Kubectl), Docker (Build-Push), Snyk, and Aqua Security (Trivy). These are well-known services commonly used in secure development lifecycles.
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe secret management by using GitHub Secrets placeholders (e.g.,
${{ secrets.GITHUB_TOKEN }},${{ secrets.AZURE_CREDENTIALS }},${{ secrets.NPM_TOKEN }}) rather than hardcoding actual credentials. It also includes instructions for setting up local test database credentials in CI environments, which is standard practice.
Audit Metadata