Skip to main content

deployment-pipeline-design

Designs secure multi-stage CI/CD pipelines with approval gates and deployment strategies for efficient software delivery.

Install this skill

or
80/100

Security score

The deployment-pipeline-design skill was audited on May 12, 2026 and we found 8 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 235

Template literal with variable interpolation in command context

SourceSKILL.md
235```yaml
medium line 333

Template literal with variable interpolation in command context

SourceSKILL.md
333```bash
medium line 300

Curl to non-GitHub URL

SourceSKILL.md
300STATUS=$(curl -sf https://app.example.com/health/ready | jq -r '.status')
low line 307

Webhook reference - potential data exfiltration

SourceSKILL.md
307curl -X POST ${{ secrets.SLACK_WEBHOOK }} \
low line 73

External URL reference

SourceSKILL.md
73url: https://app.example.com
low line 137

External URL reference

SourceSKILL.md
137address: http://prometheus:9090
low line 300

External URL reference

SourceSKILL.md
300STATUS=$(curl -sf https://app.example.com/health/ready | jq -r '.status')
low line 371

External URL reference

SourceSKILL.md
371run: ./scripts/verify-deployment.sh https://app.example.com
Scanned on May 12, 2026
View Security Dashboard
Installation guide →