github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for GitHub Actions workflow configurations and does not contain any executable scripts or malicious instructions.
- [DATA_EXFILTRATION]: No exfiltration risks were identified. The provided templates correctly implement GitHub's secret management syntax (e.g.,
${{ secrets.AWS_SECRET_ACCESS_KEY }}) to prevent sensitive credential exposure. - [REMOTE_CODE_EXECUTION]: All third-party actions used in the templates originate from reputable and well-known providers, including AWS, Docker, Snyk, and Aqua Security.
- [COMMAND_EXECUTION]: Shell commands included in the templates (e.g.,
npm ci,kubectl apply) are standard for CI/CD pipelines and are executed within the controlled environment of a GitHub Actions runner.
Audit Metadata