z-deploy-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for standard CI/CD practices using GitHub Actions.
- [SAFE]: Promotes security best practices such as OpenID Connect (OIDC) federation for cloud authentication, which avoids storing long-lived credentials in repository secrets.
- [SAFE]: Recommends the use of GitHub Environments and protection rules to gate production deployments, ensuring manual approval and branch restrictions.
- [SAFE]: The command examples for Helm, Docker Compose, and SSH are standard industry patterns for deployment and do not involve unauthorized access or exfiltration.
- [SAFE]: Mentions
actionlintfor workflow validation, which is a standard security and correctness tool for GitHub Actions. - [SAFE]: No obfuscation, prompt injection, or unauthorized data access patterns were found in the instructions or metadata.
Audit Metadata