setup-github
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the GitHub CLI directly from the official GitHub CLI releases page (
https://github.com/cli/cli/releases/download/) and fetches the latest version tag from GitHub's infrastructure. - [COMMAND_EXECUTION]: The skill executes various system commands to verify and install software including
uname,xcode-select,git,brew,winget, andsudo apt/dnf(via user instruction). These are standard operations for the skill's stated purpose of environment setup. - [PERSISTENCE]: The
scripts/install-gh.shscript modifies shell configuration files (.zshrc,.zprofile,.bashrc,.bash_profile) to ensure the installed tools remain in the system PATH. This is a standard and expected behavior for a CLI installation script. - [REMOTE_CODE_EXECUTION]: The
SKILL.mdfile contains instructions to download and execute scripts from its own repository (https://raw.githubusercontent.com/Melvynx/ai-maxxing-skills/...). This is safe as it refers to the vendor's own official infrastructure for the skill's components.
Audit Metadata