gh-fix-ci

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/inspect_pr_checks.py executes several shell commands using subprocess.run.
  • Evidence: It calls gh auth status, gh pr view, gh pr checks, gh run view, and gh api to interact with GitHub.
  • Context: These are legitimate uses of the GitHub CLI to retrieve PR metadata and CI/CD logs. The inputs (PR numbers/URLs) are used as arguments to these CLI tools within a controlled script environment.
  • [SAFE]: The skill uses the GitHub CLI (gh) which is a well-known, trusted tool for interacting with GitHub services.
  • [SAFE]: The script properly handles GitHub authentication checks before attempting sensitive operations, ensuring the user is authorized to view the requested repository data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 09:34 PM
Security Audit — agent-trust-hub — gh-fix-ci