gh-fix-ci
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's subprocess module with list-based arguments to run gh and git commands, which effectively prevents shell injection vulnerabilities.
- [EXTERNAL_DOWNLOADS]: The skill retrieves build logs and PR metadata from GitHub's official infrastructure through the authenticated GitHub CLI, which is a secure and standard practice for CI/CD analysis.
- [SAFE]: The skill's behavior is consistent with its documented purpose of helping users debug CI failures. No evidence of malicious intent, data exfiltration, or unauthorized privilege escalation was found.
Audit Metadata