github-runner
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download runner binaries from the official GitHub Actions repository at
github.com/actions/runner. This is a trusted source for the intended functionality. - [COMMAND_EXECUTION]: The documentation includes standard administrative commands using
sudo,systemctl, and platform-specific service managers (launchd, Windows Services) to register the runner as a persistent system service. - [COMMAND_EXECUTION]: Provides instructions for deploying the Actions Runner Controller (ARC) on Kubernetes, which involves using
helmandkubectlto manage official controller images and configurations. - [EXTERNAL_DOWNLOADS]: References the installation of
cert-managerfrom its official GitHub repository, which is a well-known service for managing certificates in Kubernetes environments. - [SAFE]: Sensitive information such as GitHub tokens and Personal Access Tokens (PATs) are handled via placeholders or instructions to use environment variables and Kubernetes secrets, rather than being hardcoded in the skill content.
Audit Metadata