idea-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
lsto identify existing skills and theghCLI to fetch pull request metadata. These commands are standard for an auditing tool and are used to verify project execution status. - [EXTERNAL_DOWNLOADS]: The skill fetches data from GitHub using the official
ghcommand-line tool. This involves communication with a well-known service (GitHub) to retrieve the operator's own contribution history, which is a secure and expected behavior for this use case. - [SAFE]: The skill's operations are transparent and consistent with its stated purpose of managing a startup idea pipeline. It relies on local memory files and authenticated official APIs without any signs of data exfiltration, obfuscation, or prompt injection.
Audit Metadata