github-cli
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the GitHub CLI (
gh) to interact with GitHub repositories, pull requests, actions, and secrets. - Evidence: Examples include
gh auth status,gh pr create,gh workflow run, andgh secret set. - Safety Assessment: The usage is consistent with the skill's stated purpose of operating GitHub from the terminal. The instructions include explicit warnings against insecure practices, such as
Never echo secret values in logsandDo not print tokens. Treat gh auth token output like a secret. - [SAFE]: The bundled script
scripts/gh-cli-bootstrap.shis a benign helper that outputs JSON-formatted command snippets based on a user-provided topic. It uses a standard temporary directory for its operations and performs proper cleanup.
Audit Metadata