repo-front-door
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill encourages security best practices, such as avoiding the inclusion of sensitive data in screenshots and using GitHub secrets for managing API keys and environment variables in CI/CD pipelines.
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (gh) and Flutter CLI for repository management and build processes. The provided Python script render_card.py executes Chrome/Chromium via subprocess.run to render HTML templates to images. This is implemented using a list of arguments without a shell, which is a secure pattern that prevents command injection.
- [EXTERNAL_DOWNLOADS]: The CI workflow examples utilize well-known and official GitHub Actions from trusted sources, including actions/checkout and actions/setup-java. These are standard tools for automated building and testing.
Audit Metadata