sync-github-fork
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local bash scripts and standard command-line tools such as
gitandgh(GitHub CLI) to manage repository state and remotes. - [EXTERNAL_DOWNLOADS]: Performs
git fetchoperations to retrieve updates from GitHub. These operations are directed at the user's own remotes and the verified upstream parent repository on GitHub, a well-known service. - [SAFE]: The skill implements strong security gates by requiring verification of the 'formal fork' status via GitHub metadata (
gh repo view) before allowing the addition of an upstream remote. This prevents the agent from being tricked into syncing from an unverified or malicious source.
Audit Metadata