github-repo-management

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: Executes shell commands including git, gh, and curl to perform repository management and interact with the GitHub API.
  • [EXTERNAL_DOWNLOADS]: Interacts with well-known official GitHub services (api.github.com, github.com) to manage code and configuration. These are recognized as trusted, well-known services.
  • [DATA_EXFILTRATION]: Accesses local configuration files such as ~/.git-credentials and .env to retrieve the GITHUB_TOKEN required for API authentication. This behavior is standard for the skill's primary purpose of repository management.
  • [REMOTE_CODE_EXECUTION]: Employs local python3 -c execution to parse JSON responses from the GitHub API. This is a common and safe pattern for handling structured API data in shell environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 10:11 PM
Security Audit — agent-trust-hub — github-repo-management