gh-activity-summary
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the GitHub CLI (
gh) andjqto fetch and format activity data. It includes regex-based validation for input dates to ensure they follow theYYYY-MM-DDformat, preventing potential command injection. - [DATA_EXPOSURE]: The skill accesses the user's GitHub activity metadata (commits, pull requests, issues, and reviews). This access is authorized via the user's own GitHub CLI session (
gh auth) and is restricted to the user's own activity (@me).
Audit Metadata