github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several GitHub Actions from well-known and trusted organizations including GitHub (
actions/,github/), Amazon Web Services (aws-actions/), Docker, Snyk, Aqua Security, and Slack. These are standard industry tools for CI/CD pipelines. - [CREDENTIALS_UNSAFE]: The workflows correctly utilize the GitHub Secrets syntax (e.g.,
${{ secrets.AWS_ACCESS_KEY_ID }}) for handling sensitive information. This follows security best practices by avoiding hardcoded credentials and using the platform's native secret management. - [COMMAND_EXECUTION]: The skill provides templates that include standard development commands like
npm ci,npm test,pip install, andkubectl apply. These are typical for the stated purpose of building, testing, and deploying applications and are presented as templates for the user's own environment. - [SAFE]: The skill emphasizes security best practices, such as using specific action versions (e.g.,
@v4) rather than@latest, implementing status checks, and using secret scanning tools (Trivy, Snyk).
Audit Metadata