github-multi-account

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEPERSISTENCECOMMAND_EXECUTION
Full Analysis
  • [Persistence Mechanisms]: The skill automatically modifies the user's PowerShell profile to ensure the custom functions and aliases persist across all future terminal sessions. Specifically, it appends function definitions and aliases to $PROFILE.CurrentUserAllHosts, which is a common persistence vector.
  • [Modification of Environment Variables]: The skill modifies the user's PATH environment variable via [Environment]::SetEnvironmentVariable. While this is done to enable the newly created command wrappers, modifying the PATH is a sensitive operation that can influence how the system resolves executable commands.
  • [Automated File Creation and Execution]: The skill creates new batch files (ghp.cmd and ghw.cmd) in a custom directory (.squad\bin) and configures them to execute shell commands. This pattern involves generating and placing executable scripts on the local filesystem.
  • [Command Execution]: The skill relies on executing various shell commands to detect account status (gh auth status) and verify the setup (ghp api user), which are necessary for the skill's primary functionality of managing GitHub authentication states.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 10:33 AM
Security Audit — agent-trust-hub — github-multi-account