dependabot
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and configuration templates for GitHub Dependabot, which is a built-in security and maintenance feature for GitHub repositories.\n- [EXTERNAL_DOWNLOADS]: The skill references and recommends the use of the
dependabot/fetch-metadataGitHub Action. This is an official utility provided by GitHub (a well-known and trusted service) for processing metadata in automated pull requests.\n- [COMMAND_EXECUTION]: The provided workflow examples use standard GitHub CLI (gh) commands to automate the approval and merging of pull requests. These are documented practices for repository management.
Audit Metadata