workflow-automation
Warn
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates containing high-risk command-line operations.\n
- The
package.jsonandMakefileincluderm -rfcommands for recursively deleting build artifacts and thenode_modulesdirectory.\n scripts/dev-setup.shmanages local environment services usingdocker-compose up -d.\n- [REMOTE_CODE_EXECUTION]: The automation scripts facilitate the execution of code on remote servers.\nscripts/deploy.shutilizessshto execute a sequence of commands (git pull,npm install,npm run build,pm2 restart) on production and staging hosts.\n- [EXTERNAL_DOWNLOADS]: The skill automates the retrieval of external software and configuration.\n- Multiple components (dev-setup.sh, Makefile, package.json) use
npm installandnpm cito download packages from the npm registry.\n - The GitHub Actions workflow (
ci.yml) fetches official actions for repository checkout and environment setup from GitHub.
Audit Metadata