anima-ci-integration
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard package management commands (
npm ci,npx) to install well-known development tools and the official Anima SDK from the public NPM registry. - Evidence: References to
@animaapp/anima-sdk,tsx, andeslintinSKILL.md. - [COMMAND_EXECUTION]: The GitHub Actions workflow contains standard shell commands for repository management and automated PR creation.
- Evidence: Use of
gitcommands and theghCLI for synchronizing generated UI components. - [DATA_EXPOSURE]: Authentication tokens for external services (Anima, Figma) and GitHub are handled correctly using GitHub Secrets, preventing credential leakage in logs or code.
- Evidence: Mapping of environment variables to
${{ secrets.* }}in the.github/workflows/design-sync.ymlconfiguration. - [SAFE]: The skill's functionality is consistent with its documentation. No malicious patterns, obfuscation, or suspicious network activities were identified during the analysis.
Audit Metadata