skills/alibaba/neug/sync-tasks/Gen Agent Trust Hub

sync-tasks

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes GitHub CLI commands (gh api graphql) to manage repository issues and link sub-issues. These operations are restricted to the repository context and align with the stated purpose of synchronizing local tasks to GitHub.
  • [SAFE]: File access is limited to specific paths within the project directory (e.g., ./specs/ and tasks/metadata.md) to read configuration and task data.
  • [SAFE]: Interacts with GitHub, which is a well-known service, for legitimate repository management activities. No sensitive system files or credentials are accessed or exfiltrated.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 10:27 AM
Security Audit — agent-trust-hub — sync-tasks