Cicd Templates Generator
v1.0.1Generate production-ready CI/CD workflow files for GitHub Actions, GitLab CI, or Jenkins tailored to chosen language, framework, tests, deploy, and release o...
⭐ 0· 10·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and SKILL.md. The package implements generators for GitHub Actions, GitLab CI, and Jenkins and exposes a cicd-gen CLI. No unrelated environment variables, binaries, or unusual install requirements are requested by the skill.
Instruction Scope
SKILL.md instructs the agent to run the cicd-gen CLI and optionally write files into the project. The generated CI templates embed commands and references to external actions/services and secrets (e.g., CODECOV_TOKEN, DOCKERHUB_TOKEN, AZURE_*). Some templates include commands that download and execute remote scripts (e.g., curl https://codecov.io/bash | bash and a git.io short link for goreleaser in the Jenkinsfile). While normal for CI templates, those lines instruct future CI runners to fetch and run remote code — this is a security consideration for users when they commit/run these generated files.
Install Mechanism
There is no install spec for the skill (instruction-only packaging via pip is indicated in SKILL.md and setup.py), so installation is low-risk. The skill itself does not download arbitrary artifacts at install time. Note: the generated CI artifacts (not the skill install) contain steps that fetch external scripts/actions.
Credentials
The skill requests no environment variables or secrets at runtime. Generated templates, however, reference many CI secrets and environment variables (Docker Hub creds, CODECOV_TOKEN, AZURE credentials, ALIYUN/TENCENT keys, NPM_TOKEN, CI_REGISTRY_* etc.). This is expected for CI/CD workflows but means users must supply those secrets in their CI provider — review and minimize secrets before enabling pipelines.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills or system-wide settings. It writes files into a user-specified output directory (default ./.github/workflows) which is appropriate for a CI template generator.
Assessment
This skill appears to do exactly what it says: generate CI/CD workflow files. Before installing/using it, review the generated templates (especially any lines that curl | bash or call external scripts and the list of referenced secrets) so you understand what your CI runner will do and which secrets it will need. If you plan to commit generated files, avoid blindly committing templates that execute remote scripts or that assume credentials you don't want in your CI environment; prefer replacing remote-install pipes with pinned/reviewed releases or internal steps where possible.Like a lobster shell, security has layers — review code before you run it.
ci-cdvk97c75qs84sbk1gsktax4zss7d84d4smcicdvk97c75qs84sbk1gsktax4zss7d84d4smgithub-actionsvk97c75qs84sbk1gsktax4zss7d84d4smgitlab-civk97c75qs84sbk1gsktax4zss7d84d4smjenkinsvk97c75qs84sbk1gsktax4zss7d84d4smlatestvk97c75qs84sbk1gsktax4zss7d84d4smworkflowvk97c75qs84sbk1gsktax4zss7d84d4sm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
