install-gemini-code-review-action
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches workflow templates and configuration TOML files from the author's repository at
github.com/derailed-dash/gemini-review-action. These resources are used as boilerplate for the target repository's CI/CD setup. - [COMMAND_EXECUTION]: The skill provides instructions to execute shell commands for setting GitHub secrets using the
ghCLI and performing standardgitversion control operations (add, commit, push). - [CREDENTIALS_UNSAFE]: The skill includes instructions for managing the
GEMINI_API_KEY. It follows security best practices by explicitly warning against passing secrets via command-line flags and instead recommends using secure stdin redirection with the GitHub CLI.
Audit Metadata