deploy
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional templates for deployment without executing any malicious code or exfiltrating data.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials found. Sensitive values like DATABASE_URL and POSTGRES_PASSWORD use environment variable placeholders, and the documentation explicitly instructs users to use platform-native secret management (GitHub Secrets, Kubernetes Secrets, AWS Secrets Manager) for production environments.
- [EXTERNAL_DOWNLOADS]: The skill references official GitHub Actions (actions/checkout, docker/login-action, docker/build-push-action) and official Docker images (postgres:16-alpine). These are well-known, trusted sources for development and deployment workflows.
- [DATA_EXFILTRATION]: Network operations are limited to local health checks (localhost:8000) using curl and wget, which are standard for verifying deployment success.
Audit Metadata