pipeline-blueprint
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for CI/CD configurations. It explicitly recommends security best practices such as using secret management, pinning action versions to SHAs, and applying the principle of least privilege.
- [EXTERNAL_DOWNLOADS]: The provided templates reference official and well-known GitHub Actions (e.g.,
actions/checkout,actions/setup-node,docker/build-push-action) and Docker images (e.g.,postgres:16,node:20-slim). These are standard industry tools and do not pose a security risk in this context. - [COMMAND_EXECUTION]: The skill contains example shell commands (e.g.,
npm ci,pip install,docker build) within the pipeline templates. These are intended for user implementation in their own CI environments and are not executed by the agent itself during skill interaction.
Audit Metadata