ci-cd-and-automation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill explicitly promotes the use of GitHub Secrets for managing sensitive data, which is a key security best practice.
- [SAFE]: It integrates security auditing tools (npm audit) into the configuration templates to identify vulnerabilities in the dependency tree.
- [EXTERNAL_DOWNLOADS]: The configuration references trusted GitHub Actions and well-known developer tools like Playwright and Vercel. These are standard in the industry and originate from reliable sources.
- [INDIRECT_PROMPT_INJECTION]: Documentation describes a process of feeding CI logs back to an agent. While this handles external data, the process is mediated by the user and follows standard development workflows.
Audit Metadata