codespaces
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for utilizing legitimate management tools, specifically the
ghCLI, to interact with cloud environments. This includes shell access viagh codespace sshand the configuration of lifecycle scripts such aspostCreateCommandwithin devcontainer environments. These are standard operations for the described workflow. - [EXTERNAL_DOWNLOADS]: References official tools and images from trusted providers, including the GitHub CLI website (
cli.github.com), Microsoft Container Registry (mcr.microsoft.com), and GitHub Container Registry (ghcr.io). These sources are recognized as safe and are documented neutrally. - [CREDENTIALS_UNSAFE]: Includes specific instructions on how to securely handle credentials using
gh secret set, demonstrating best practices for secrets management within the GitHub ecosystem and avoiding hardcoded secrets.
Audit Metadata