dotnet-gha-build-test
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and templates for GitHub Actions workflows that align with industry-standard development practices.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and official GitHub Actions, such as 'actions/setup-dotnet' and 'codecov/codecov-action', which are maintained by trusted organizations.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets or credentials were detected. The workflow examples correctly demonstrate the use of GitHub Secrets for sensitive authentication tokens and include explicit warnings against hardcoding credentials.
- [COMMAND_EXECUTION]: The skill utilizes standard .NET CLI commands and basic shell utilities (like 'find' and 'jq') to automate builds and test discovery within the runner environment.
Audit Metadata