inbox-install-gh-cli

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Privileged Command Execution: The Linux installation instructions utilize sudo to perform system-level tasks, including directory creation and package management. While necessary for installing software globally on a Linux system, users should be aware that these commands run with administrative privileges.
  • External Resource Retrieval: The skill fetches a GPG keyring from cli.github.com to verify the authenticity of the GitHub CLI packages on Linux. This is a standard security practice to ensure the software has not been tampered with, using an official vendor domain.
  • System Package Management: The instructions employ standard package managers such as Homebrew (macOS), APT (Linux), and WinGet (Windows). These are conventional tools for software distribution and management on their respective platforms.
  • Authentication and Configuration: The skill provides commands for authenticating with GitHub and configuring CLI behavior, such as disabling the pager. These are standard administrative steps for the GitHub CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 02:51 PM
Security Audit — agent-trust-hub — inbox-install-gh-cli