jabraf-workflows-pr-checks
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell command (
grep) to identify existing CI configuration files in the.github/workflows/directory. This is used solely to prevent overwriting existing configurations without user consent. - [EXTERNAL_DOWNLOADS]: The generated configuration file references a reusable GitHub Actions workflow located at
github.com/jabranr/workflows. This repository belongs to the same author as the skill and is used as part of the intended CI/CD setup functionality. - [DATA_EXFILTRATION]: The skill reads project metadata from
package.json,.nvmrc, and other configuration files to automatically determine settings such as Node.js versions and available build/test scripts. This information is used locally to populate the workflow template and is not exfiltrated to any external server.
Audit Metadata