ci-pipeline — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ci-pipeline (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
!ls package.json requirements.txt pyproject.toml go.mod Cargo.toml *.csproj *.sln Gemfile composer.json mix.exs Makefile Dockerfile 2>/dev/null !ls .github/workflows/ .gitlab-ci.yml Jenkinsfile .circleci/ .travis.yml bitbucket-pipelines.yml 2>/dev/null !cat package.json 2>/dev/null | grep -E '"(scripts|devDependencies)"' -A 10 | head -20
From project files, determine:
Stage 1: Install
Stage 2: Lint
Stage 3: Test
Stage 4: Build
Stage 5: Security (optional)
Stage 6: Deploy (placeholder)
GitHub Actions:
name: CI
on: [push, pull_request]
jobs:
ci:
runs-on: ubuntu-latest
steps: ...GitLab CI:
stages: [install, lint, test, build, deploy]~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.