gh-logs
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
gh(GitHub CLI) for read-only operations such asrun list,run view, andrun watch. It also uses standard Unix utilities likegit,grep,sed, andawkfor log processing. - [EXTERNAL_DOWNLOADS]: Fetches workflow logs directly from GitHub's official infrastructure via
gh run view --log-failed. This is the core intended purpose of the skill and uses authenticated, encrypted channels. - [SAFE]: The skill uses a local script (
scripts/classify-log.sh) for log analysis rather than sending logs to an external service. This preserves data privacy within the agent's execution environment. The frontmatter correctly restricts tools to necessaryghandgitcommands, following the principle of least privilege.
Audit Metadata