github-workflows

Pass

Audited by Gen Agent Trust Hub on Mar 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard GitHub Action templates and shell commands for Rust CI/CD.
  • [EXTERNAL_DOWNLOADS]: References and installs well-known Rust ecosystem tools (e.g., cargo-audit, cargo-tarpaulin, sccache) and community-standard GitHub Actions (e.g., dtolnay/rust-toolchain, Swatinem/rust-cache, softprops/action-gh-release). These are reputable sources and standard for the described use case.
  • [COMMAND_EXECUTION]: Uses gh CLI and standard shell utilities (grep, sed, jq) to inspect repository state and generate release notes. All commands are relevant to the skill's purpose.
  • [CREDENTIALS_UNSAFE]: References GitHub Secrets (e.g., GITHUB_TOKEN, CARGO_REGISTRY_TOKEN) within YAML templates in accordance with standard GitHub Actions security practices. No secrets are hardcoded or leaked.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 7, 2026, 03:10 AM