github-copilot-cli
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide for using the
gh copilotCLI tool. It provides instructional content on how to interact with the tool for code explanation, suggestions, and debugging. - [SAFE]: A small Python script is provided in the documentation to validate the YAML frontmatter of the SKILL.md file. This script uses
yaml.safe_load(), which is a secure way to parse YAML content, and it operates only on the local file. - [SAFE]: All suggested commands (
gh copilot explain,gh copilot suggest) are standard uses of the official GitHub Copilot extension for the GitHub CLI. These commands are intended to be executed by the user and do not involve hidden network requests or unauthorized file access.
Audit Metadata