github-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands via 'gh' CLI for pull request management (e.g., 'gh pr create').
- [COMMAND_EXECUTION]: Executes external tools/scripts defined in '~/.bonfire/source.json' (e.g., 'node ~/.bonfire/skills/clickup/query.mjs') to fetch task details.
- [COMMAND_EXECUTION]: Uses 'npx skills find' for dynamic discovery of available tools when a task source is not configured.
Audit Metadata