repo-ci
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a custom Bash script
scripts/repo-cithat performs administrative repository tasks. It executes standard development tools includinggitfor version control,gh(GitHub CLI) for API interactions and repository configuration, andpython3for data processing. - [DYNAMIC_EXECUTION]: The
repo-ciscript utilizes inline Python execution (viapython3 -andpython3 -c) to handle JSON parsing and comparison logic. These operations are performed on local files such aspackage.jsonand audit result baselines created during the tool's execution. - [EXTERNAL_DOWNLOADS]: The provided workflow templates reference official GitHub Actions and utilities from well-known and trusted sources, including
actions/checkout,gitleaks/gitleaks-action,pypa/gh-action-pypi-publish, andcodecov/codecov-action. It also suggests the installation of standard security and testing tools likepip-audit,ruff, andpytestfrom official package registries.
Audit Metadata