github-actions-templates
Pass
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: LOWNO_CODE
Full Analysis
- SAFE (INFO): The skill is entirely declarative, consisting of Markdown documentation and YAML template snippets. It contains no scripts or code that can be executed by the agent at runtime.
- EXTERNAL_DOWNLOADS (INFO): The templates reference third-party GitHub Actions from providers like AWS, Docker, Snyk, and Aqua Security. These are standard in CI/CD workflows and are provided as reference material for the user to implement.
- CREDENTIALS_UNSAFE (SAFE): The skill demonstrates the correct use of secrets (e.g., ${{ secrets.GITHUB_TOKEN }}, ${{ secrets.AWS_SECRET_ACCESS_KEY }}) and does not contain any hardcoded credentials.
Audit Metadata