github-workflows
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard GitHub Action templates and shell commands for Rust CI/CD.
- [EXTERNAL_DOWNLOADS]: References and installs well-known Rust ecosystem tools (e.g.,
cargo-audit,cargo-tarpaulin,sccache) and community-standard GitHub Actions (e.g.,dtolnay/rust-toolchain,Swatinem/rust-cache,softprops/action-gh-release). These are reputable sources and standard for the described use case. - [COMMAND_EXECUTION]: Uses
ghCLI and standard shell utilities (grep, sed, jq) to inspect repository state and generate release notes. All commands are relevant to the skill's purpose. - [CREDENTIALS_UNSAFE]: References GitHub Secrets (e.g.,
GITHUB_TOKEN,CARGO_REGISTRY_TOKEN) within YAML templates in accordance with standard GitHub Actions security practices. No secrets are hardcoded or leaked.
Audit Metadata