gh-cli
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches GPG keyring and package repository configuration from official GitHub infrastructure (
cli.github.com) during the Linux installation steps. These are standard procedures for the documented tool. - [COMMAND_EXECUTION]: Contains a detailed reference for command-line operations including repository creation, pull request management, and system-level configuration (e.g., shell completions, credential helpers).
- [CREDENTIALS_UNSAFE]: Discusses authentication workflows and secret management (
gh secret set,GH_TOKEN). All examples use safe placeholders likeghp_xxxxxxxxxxxxor instructions to read from local files (e.g.,mytoken.txt), which is standard practice for secret management documentation.
Audit Metadata