star-history-chart
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script uses
subprocess.check_outputto executegit remote get-url originlocally. This is used to automatically resolve the repository name for charting purposes when environment variables are not present. - [EXTERNAL_DOWNLOADS]: The GitHub Action workflow installs the well-known
requestsPython package from the official PyPI registry to facilitate communication with the GitHub API. - [CREDENTIALS_UNSAFE]: The skill utilizes the standard
GITHUB_TOKENprovided by GitHub Actions for authenticated API requests. This follows best practices for secret management in CI/CD environments and avoids hardcoded credentials.
Audit Metadata