heyGRC Compliance Review
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for a standard GitHub App integration. It follows security best practices by recommending that users store secrets (HEYGRC_API_KEY) in environment variables rather than hardcoding them. Network operations are directed to the service's official domain (api.heygrc.com). All referenced URLs are informative documentation or official service endpoints. No automated execution of scripts or local code was found.
Audit Metadata