setup-github

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the GitHub CLI directly from the official GitHub CLI releases page (https://github.com/cli/cli/releases/download/) and fetches the latest version tag from GitHub's infrastructure.
  • [COMMAND_EXECUTION]: The skill executes various system commands to verify and install software including uname, xcode-select, git, brew, winget, and sudo apt/dnf (via user instruction). These are standard operations for the skill's stated purpose of environment setup.
  • [PERSISTENCE]: The scripts/install-gh.sh script modifies shell configuration files (.zshrc, .zprofile, .bashrc, .bash_profile) to ensure the installed tools remain in the system PATH. This is a standard and expected behavior for a CLI installation script.
  • [REMOTE_CODE_EXECUTION]: The SKILL.md file contains instructions to download and execute scripts from its own repository (https://raw.githubusercontent.com/Melvynx/ai-maxxing-skills/...). This is safe as it refers to the vendor's own official infrastructure for the skill's components.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 06:00 AM