submodule-setup
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official GitHub CLI (gh) and Git commands to perform repository operations, ensuring compatibility and security within the user's authenticated environment.
- [SAFE]: Personal Access Token (PAT) management is handled with security awareness, specifically guiding users to use GitHub Secrets and recommending input methods that prevent credentials from leaking into shell history.
- [SAFE]: The skill incorporates safety mechanisms, including automated backup branch creation before modifications and the deployment of local Git hooks that prevent invalid submodule states.
- [SAFE]: Modifications to the agent's configuration file are transparently defined and serve to enforce validation scripts during the development workflow.
- [SAFE]: External references and GitHub Action templates point to well-known repositories and follow standard CI/CD implementation patterns for multi-repo architectures.
Audit Metadata