ci-cd

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous templates for shell commands involving kubectl, docker, and aws cli. These commands are standard for managing infrastructure and deployments in a CI/CD context and are used appropriately within the provided templates.
  • [EXTERNAL_DOWNLOADS]: The workflow examples reference several official GitHub Actions and container images from well-known sources, including actions/checkout, aws-actions/configure-aws-credentials, aquasecurity/trivy-action, and bitnami/kubectl. These represent standard, trusted dependencies for building and deploying software.
  • [DATA_EXFILTRATION]: The instructions include examples for reporting deployment metrics to external monitoring endpoints (e.g., metrics.example.com). These are documented as standard observability patterns and do not involve unauthorized exfiltration of sensitive data.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by explicitly advising against hardcoded secrets. It demonstrates the use of secure environment variables, GitHub Secrets, and AWS Secrets Manager for handling sensitive credentials like registry passwords and API tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 05:05 PM
Security Audit — agent-trust-hub — ci-cd