github-repokit-repository

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configures Terragrunt to download Terraform modules from the author's GitHub repository (https://github.com/emrecavunt/github-repokit.git). This is a standard and documented functionality of the tool for the intended purpose of repository management.
  • [COMMAND_EXECUTION]: The skill provides a set of commands and a Makefile intended for managing repository state and configuration. The SKILL.md instructions include a safety guardrail explicitly telling the agent to print the plan commands but to stop and not execute the terragrunt apply command, ensuring a human-in-the-loop requirement for changes.
  • [CREDENTIALS_UNSAFE]: The documentation mentions the requirement for a GITHUB_TOKEN to be provided via environment variables. The skill instructions reinforce safe handling by directing the agent to use placeholders only and avoid hardcoding live secrets or cloud identifiers.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 08:33 PM
Security Audit — agent-trust-hub — github-repokit-repository