gh-notifications

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses official GitHub CLI commands (gh api) to fetch and manage user notifications. The logic focuses on productivity by filtering out noise (CI checks) and ranking notifications by importance (mentions, reviews).
  • [SAFE]: It demonstrates good security practice by instructing the agent to convert internal API URLs into user-facing web links and to verify if a notification 'trigger' is fresh or stale before presenting it as high priority.
  • [COMMAND_EXECUTION]: The skill executes gh CLI commands to fetch data. This is the intended primary purpose of the skill and uses the user's existing authenticated environment without introducing new dependencies or remote scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 11:53 AM