github-actions
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as an educational resource for GitHub Actions best practices and does not contain any malicious instructions or prompt injection attempts.- [EXTERNAL_DOWNLOADS]: The skill references and fetches metadata for official GitHub Actions (e.g., actions/checkout) and known tools (e.g., oven-sh/setup-bun) using the GitHub API. These references target well-known and trusted services and are used for version verification.- [CREDENTIALS_UNSAFE]: The content includes a placeholder API key string (sk-1234567890) used specifically as a negative example in a security anti-pattern tutorial; it does not represent an actual credential exposure.- [COMMAND_EXECUTION]: The skill instructions utilize the GitHub CLI (gh) for querying repository release information, which is a legitimate and authorized use case for maintaining workflow security.
Audit Metadata