testland/notebook-ci-pipeline-author
Wires the papermill-tests, nbval-tests, and testbook-tests skills into a single working GitHub Actions CI pipeline: parameterized execution (papermill) -> output regression (nbval) -> function unit tests (testbook) -> artifact upload (executed .ipynb + HTML report). Use when a team has notebook tests spread across the three tools but assembles the pipeline manually and needs a single authoritative workflow file with output stripping (nbstripout), pip caching, and structured failure reporting.
74
93%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
2 low severity findings. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
In the required runtime workflow, GitHub Actions triggers on outsider-submitted pull requests/pushes and then runs papermill, nbval, testbook, and nbconvert on repository-owned notebooks (e.g., `notebooks/analysis.ipynb`), meaning outsider-authored changes in those files are read/executed by the pipeline.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The workflow uses GitHub Actions via "uses:" entries (kynan/nbstripout@main, actions/setup-python@v5, actions/checkout@v4, actions/upload-artifact@v4) which are fetched and executed at workflow runtime as remote action code, satisfying the criteria for a runtime external dependency that executes remote code.
- Audited
- Security analysis