CI-CD
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes documentation and templates for common CI/CD tasks that involve executing shell commands such as
npm test,pytest, andfastlane. It also provides a VPS deployment example that includes asudo systemctl restartcommand for service management, which is a standard administrative task in deployment contexts. - [EXTERNAL_DOWNLOADS]: The skill references the installation of well-known development tools and dependencies through package managers, such as
gem install fastlane,npm ci, andpip install -r requirements.txt. These are standard practices for configuring build environments. - [EXTERNAL_DOWNLOADS]: Templates utilize well-known GitHub Actions from trusted or established community sources (e.g.,
actions/checkout,docker/build-push-action,appleboy/ssh-action) to facilitate workflow automation. - [SAFE]: Analysis of the skill metadata and instructions found no evidence of prompt injection, data exfiltration, or obfuscated content. The handling of sensitive assets like keystores and SSH keys is correctly described through the use of platform-provided secrets (e.g., GitHub Secrets), adhering to security best practices.
- [SAFE]: No malicious patterns or suspicious behaviors were detected across the five analyzed files.
Audit Metadata