github-lockdown
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate repository security hardening using the official GitHub CLI tool. All API operations target the standard GitHub API domain.
- [SAFE]: The implementation in
scripts/lockdown.shuses defensive programming practices (e.g.,set -euo pipefail) and utilizesjqsafely with argument variables to prevent JSON injection vulnerabilities. - [SAFE]: A mandatory dry-run and user confirmation phase is integrated into the procedure, ensuring that users can review the generated ruleset configuration before it is applied.
- [SAFE]: The skill includes a verification mechanism that reads the configuration back from the GitHub API after a write operation to ensure the remote state matches the intended security policy.
- [SAFE]: The provided
tests/directory demonstrates high development standards, using a mock environment to validate the script's logic across various scenarios without requiring real credentials or network access.
Audit Metadata