write-ci-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes CI/CD configuration files (e.g., .github/workflows, .gitlab-ci.yml) which are external and could contain malicious instructions designed to influence the agent. The skill addresses this by providing specific rules to sanitize event data and manage permissions, reducing the risk of accidental execution of untrusted code.
- [EXTERNAL_DOWNLOADS]: The documentation includes references to official syntax guides and security documentation from well-known service providers, including GitHub, GitLab, and Atlassian. These references are used solely for informational purposes to support the creation of secure pipelines.
- [COMMAND_EXECUTION]: The skill recommends the use of standard security and linting tools, such as
actionlintandzizmor, to validate CI workflows and identify dangerous triggers or unpinned actions. These tools are industry standards for maintaining CI/CD security hygiene.
Audit Metadata