github-cli
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a comprehensive reference guide for the GitHub CLI (gh). It documents standard operations for managing issues, pull requests, releases, and GitHub Actions workflows using the official tool.
- [SAFE]: The skill includes instructions for downloading artifacts and release binaries directly from GitHub using 'gh run download' and 'gh release download'. As these operations target a well-known service for project-specific resources, they are documented as safe functionality.
- [SAFE]: The patterns provided for scripting and automation follow idiomatic shell practices. While the skill facilitates the processing of data from a remote service (GitHub), the examples focus on structured data (like issue numbers) and common administrative tasks.
- [SAFE]: No hardcoded credentials or sensitive information exposure was detected. The documentation for secret management correctly uses placeholders (such as 'sk-...') and promotes secure practices, such as reading from local files to prevent secrets from appearing in shell history.
Audit Metadata