github-multi-account
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [Persistence Mechanisms]: The skill automatically modifies the user's PowerShell profile to ensure the custom functions and aliases persist across all future terminal sessions. Specifically, it appends function definitions and aliases to
$PROFILE.CurrentUserAllHosts, which is a common persistence vector. - [Modification of Environment Variables]: The skill modifies the user's
PATHenvironment variable via[Environment]::SetEnvironmentVariable. While this is done to enable the newly created command wrappers, modifying the PATH is a sensitive operation that can influence how the system resolves executable commands. - [Automated File Creation and Execution]: The skill creates new batch files (
ghp.cmdandghw.cmd) in a custom directory (.squad\bin) and configures them to execute shell commands. This pattern involves generating and placing executable scripts on the local filesystem. - [Command Execution]: The skill relies on executing various shell commands to detect account status (
gh auth status) and verify the setup (ghp api user), which are necessary for the skill's primary functionality of managing GitHub authentication states.
Audit Metadata