z-deploy-pipeline

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and examples for standard CI/CD practices using GitHub Actions.
  • [SAFE]: Promotes security best practices such as OpenID Connect (OIDC) federation for cloud authentication, which avoids storing long-lived credentials in repository secrets.
  • [SAFE]: Recommends the use of GitHub Environments and protection rules to gate production deployments, ensuring manual approval and branch restrictions.
  • [SAFE]: The command examples for Helm, Docker Compose, and SSH are standard industry patterns for deployment and do not involve unauthorized access or exfiltration.
  • [SAFE]: Mentions actionlint for workflow validation, which is a standard security and correctness tool for GitHub Actions.
  • [SAFE]: No obfuscation, prompt injection, or unauthorized data access patterns were found in the instructions or metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 09:29 AM