push-skill-to-github
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell-based git commands (
git status,git add,git commit,git push) to manage repository state in the user's local directory. This is a standard functional behavior for version control. - [DATA_EXFILTRATION]: The skill automates the transfer of local files to a remote GitHub repository. The documentation clearly states that these changes are mirrored to a public repository (davidondrej/skills), making the data flow transparent and consistent with the skill's intended purpose of publishing agent skills.
Audit Metadata