and-backend-contract
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides detailed shell recipes using the GitHub CLI (
gh api) to interact with the GitHub REST API. These commands are used to read and mutate issue relationships, such as sub-issues and dependencies, which is the primary purpose of thegithub-nativebackend. The instructions include warnings to verify and approve identifiers before execution. - [EXTERNAL_DOWNLOADS]: The skill references official GitHub documentation for the REST API and GitHub CLI manual. These are trusted technical references necessary for the skill's operation.
- [SAFE]: No obfuscation, unauthorized data exfiltration, or persistence mechanisms were detected. The skill implements a structured state management system with clear boundaries and validation steps for its configuration (
.and/config.yml).
Audit Metadata