megatron-commit-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches commit history, metadata, and branch information from the official NVIDIA Megatron-LM repository on GitHub. This is a well-known and reputable source required for the skill's stated purpose.
- [COMMAND_EXECUTION]: The skill executes Git subcommands (fetch, ls-remote, rev-parse, show, diff-tree) to interact with the repository. The implementation uses Python's subprocess module with list-based arguments, which is the recommended safe practice to prevent shell injection vulnerabilities.
Audit Metadata