cicd-pipelines
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The YAML templates reference trusted actions from the 'actions' and 'docker' GitHub organizations and standard Python tools (ruff, mypy, pytest) from PyPI.
- [COMMAND_EXECUTION] (SAFE): The validation script (validate.py) only performs local file and directory checks and does not execute external commands or shell scripts.
- [DYNAMIC_EXECUTION] (SAFE): The skill uses yaml.safe_load() for configuration processing, preventing common unsafe deserialization vulnerabilities.
- [DATA_EXFILTRATION] (SAFE): No sensitive data access or unauthorized outbound network requests were found in any of the skill's components.
- [PROMPT_INJECTION] (SAFE): The skill's documentation and instructional markers are benign and do not attempt to override agent safety guidelines.
Audit Metadata