external-consumers
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes
gh apicommand snippets for searching code and reading file contents across GitHub repositories. These commands are provided as operational guides for developers to perform manual impact analysis when changing public API surfaces. - [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill demonstrates reading private repository content (
gh api ... --jq '.content' | base64 -d), this is scoped to theforcedotcomandsalesforcecliorganizations, which are the vendor's own domains. This represents internal developer workflow for cross-repository dependency checking rather than unauthorized exfiltration. - [OBFUSCATION]: The skill uses
base64 -dto decode GitHub API responses. This is a standard requirement for handling file contents returned by the GitHub API and does not constitute malicious obfuscation.
Audit Metadata