devops-engineer

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides best-practice guidance for DevOps engineering, emphasizing automation, security scanning, and proper secrets management.
  • [EXTERNAL_DOWNLOADS]: External references to GitHub Actions (e.g., from AWS, Slack, and Aqua Security) and Helm repositories (e.g., Prometheus Community) target official, well-known, and trusted organizations.
  • [COMMAND_EXECUTION]: Command-line examples for kubectl, terraform, and aws-cli are standard infrastructure operations and are used appropriately within the skill's context.
  • [CREDENTIALS_UNSAFE]: The skill correctly demonstrates the use of secret management through environment variables and dedicated secret stores (e.g., ${{ secrets.AWS_ACCESS_KEY_ID }}), specifically instructing against hardcoding credentials in code.
  • [REMOTE_CODE_EXECUTION]: Automated workflows use established CI/CD platforms and versioned actions from reputable providers, following industry standards for remote execution in deployment pipelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 08:05 AM
Security Audit — agent-trust-hub — devops-engineer