ci-cd
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate templates for CI/CD pipelines.
- [EXTERNAL_DOWNLOADS]: Fetches official GitHub Actions from the 'actions' organization for environment setup and repository checkout.
- [EXTERNAL_DOWNLOADS]: Utilizes deployment actions from well-known services including Cloudflare and DigitalOcean.
- [CREDENTIALS_UNSAFE]: Correctly implements secrets management using the '${{ secrets.NAME }}' syntax for API tokens and SSH keys, avoiding hardcoded credentials.
- [COMMAND_EXECUTION]: Outlines standard build and deployment commands using npm, doctl, and wrangler in a restricted workflow environment.
Audit Metadata