jenkins-pipeline
Pass
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: LOWNO_CODE
Full Analysis
- [NO_CODE] (INFO): The skill is entirely composed of Markdown documentation and Groovy code examples for Jenkins Pipelines. It does not contain any executable scripts (Python, JS, Shell) or binaries that would run within the agent's host environment.
- [DATA_EXFILTRATION] (SAFE): No network operations or unauthorized file access patterns were detected. The skill demonstrates safe secret handling via the Jenkins
credentials()helper rather than hardcoding sensitive information. - [PROMPT_INJECTION] (SAFE): No instructions attempting to bypass safety filters, extract system prompts, or override agent behavior were identified.
- [COMMAND_EXECUTION] (SAFE): While the code examples include Jenkins
shsteps for automation (e.g., npm, docker, kubectl), these are provided as templates for the user's CI/CD environment and are not executed by the agent itself.
Audit Metadata