setup-github-pages
Warn
Audited by Snyk on Oct 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill sets up and updates GitHub Pages documentation sites, including calling GitHub API endpoints to enable Pages (
POST/PUT /repos/{owner}/{repo}/pages). This is a direct platform configuration and operational service instruction via API calls. However, independent service-layer authentication and authorization controls are documented using GitHub CLI authentication (gh api,gh repo view) coupled with explicit administrator permission checks (viewerPermission == ADMIN, HTTP status validation) enforced by the GitHub platform before making any modification requests.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata