workflow-development
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected. The skill provides clear guidance on maintaining CI/CD workflows while emphasizing security measures like disabling credential persistence (
persist-credentials: false) and minimizing permissions. - [EXTERNAL_DOWNLOADS]: The skill references standard GitHub Actions including
actions/checkout,actions/upload-artifact, andastral-sh/setup-uv. These are well-known and trusted sources. - [COMMAND_EXECUTION]: The instructions mention using
uv run prekto validate GitHub Actions workflow files. This is a standard project-level command for validation and linting.
Audit Metadata