ci-fails-buildkite

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell scripts located within the project's repository structure, specifically .buildkite/scripts/ci-fetch-log.sh and ./ci-clean-log.sh. These are repo-native automation tools used for CI log management.- [EXTERNAL_DOWNLOADS]: The skill fetches build logs from Buildkite's official domain. The referenced URLs target the project's own CI organization at buildkite.com/vllm/, which is a well-known and expected service for this project.- [PROMPT_INJECTION]: The skill processes external data (CI logs) which represents a surface for indirect prompt injection. However, the data is handled via dedicated scripts designed to strip non-essential content (like ANSI codes), and the functionality is limited to project diagnostics.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 02:05 AM
Security Audit — agent-trust-hub — ci-fails-buildkite