pinned-tag

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard command-line tools such as git, rg, awk, sort, and tail to interact with remote repositories and process metadata. These operations are performed in a controlled manner to resolve commit SHAs.
  • [EXTERNAL_DOWNLOADS]: Utilizes git ls-remote to fetch tag information from github.com. This network activity targets a well-known, trusted service and is essential for the skill's primary function of securing Action workflows.
  • [SAFE]: No malicious patterns, including prompt injection, obfuscation, or persistence mechanisms, were detected in the skill instructions or metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 12:23 AM
Security Audit — agent-trust-hub — pinned-tag