build-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a best-practice guide for frontend build systems and deployment environments.
- [DATA_EXPOSURE]: The instructions explicitly warn against including sensitive secrets (e.g.,
STRIPE_SECRET_KEY,DATABASE_URL) in client-side bundles and provide a clear hierarchy for managing public vs. private environment variables. - [EXTERNAL_DOWNLOADS]: The CI/CD examples utilize well-known, community-standard GitHub Actions (such as
actions/checkout,actions/setup-node, andtreosh/lighthouse-ci-action) for build automation and quality checks. - [COMMAND_EXECUTION]: Shell commands included in the documentation are restricted to standard development workflows, including package installation (
pnpm install), testing (playwright install), and deployment via the official Vercel CLI.
Audit Metadata