ship
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill provides instructions for standard Git and GitHub CLI workflows. No malicious behaviors such as prompt injection, obfuscation, or unauthorized data access were identified.
- [COMMAND_EXECUTION]: Commands used are limited to local repository management and interaction with the official GitHub API through the
ghtool. The use of a quoted heredoc for commit messages ('EOF') demonstrates a secure practice for handling user-provided strings to prevent shell injection. - [DATA_EXFILTRATION]: Data transmission is restricted to pushing code changes to the user's configured Git origin, which is consistent with the skill's purpose of shipping code.
Audit Metadata