skills/depot/skills/depot-ci/Gen Agent Trust Hub

depot-ci

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it is designed to read and process existing GitHub Actions workflow files.
  • Ingestion points: Processes YAML configuration files located in .github/workflows/ and .github/actions/.
  • Boundary markers: The instructions do not specify any explicit boundary markers or 'ignore' instructions when parsing these files.
  • Capability inventory: The skill can execute depot ci CLI commands, manage environment secrets, and perform network requests via curl.
  • Sanitization: No specific sanitization or validation logic for the ingested workflow content is described in the provided files.
  • [COMMAND_EXECUTION]: Executes local CLI commands using the depot tool to manage CI/CD tasks.
  • Evidence: Commands include depot ci migrate, depot ci run, and depot ci secrets.
  • [EXTERNAL_DOWNLOADS]: Communicates with the vendor's official API endpoint for workflow orchestration and secret management.
  • Evidence: Performs curl requests to api.depot.dev.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 10:32 AM