phase-9-deployment
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The instructions and code templates provide a safe and standard framework for setting up deployment pipelines using reputable tools such as GitHub Actions and Vercel.\n- [SAFE]: The skill correctly identifies sensitive variables (e.g., DATABASE_URL, AUTH_SECRET) and instructs the user to handle them via platform-native secret management rather than hardcoding them in the codebase.\n- [SAFE]: Docker configurations follow security hardening practices, including the use of multi-stage builds and the creation of a non-privileged user to run the application process.\n- [SAFE]: The CI/CD workflows include a security step that runs 'npm audit' to detect vulnerabilities in dependencies.\n- [SAFE]: All external references are to established, well-known technology services and official documentation sources.
Audit Metadata