gh-notifications
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official GitHub CLI commands (
gh api) to fetch and manage user notifications. The logic focuses on productivity by filtering out noise (CI checks) and ranking notifications by importance (mentions, reviews). - [SAFE]: It demonstrates good security practice by instructing the agent to convert internal API URLs into user-facing web links and to verify if a notification 'trigger' is fresh or stale before presenting it as high priority.
- [COMMAND_EXECUTION]: The skill executes
ghCLI commands to fetch data. This is the intended primary purpose of the skill and uses the user's existing authenticated environment without introducing new dependencies or remote scripts.
Audit Metadata