documenso-ci-integration
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configuration templates reference official GitHub Actions (actions/checkout, actions/setup-node) and the Codecov action (codecov/codecov-action). These are well-known services used for standard CI/CD operations.
- [CREDENTIALS_UNSAFE]: Security best practices are followed for credential management; the provided templates use repository secrets (e.g., DOCUMENSO_STAGING_API_KEY) to handle sensitive API keys instead of hardcoding them in the workflow files.
- [COMMAND_EXECUTION]: The skill provides instructional templates for executing standard project maintenance commands such as npm ci, npm run lint, and npm run build within the context of a continuous integration environment.
Audit Metadata