instantly-ci-integration

Pass

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected in the provided skill content.
  • [COMMAND_EXECUTION]: The skill uses standard development and automation commands such as npm, npx, tsc, vitest, eslint, and grep within a GitHub Actions context for testing and validation.
  • [EXTERNAL_DOWNLOADS]: The GitHub Actions workflows reference official actions from the actions/ and google-github-actions/ organizations, which are well-known and trusted providers.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to store sensitive API keys in GitHub Secrets (${{ secrets.INSTANTLY_API_KEY }}) rather than hardcoding them. A mock key is used only for local CI testing against a mock server.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 4, 2026, 05:41 PM