verasic-github-env
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation describes an installation process using a shell script hosted on the author's GitHub repository and piped directly to bash. This is a standard installation pattern for this vendor's tools.
- [COMMAND_EXECUTION]: The skill performs shell operations including repository initialization, git configuration checks, and GitHub CLI commands to verify authentication status and repository access.
- [CREDENTIALS_UNSAFE]: The skill is designed to manage GitHub Personal Access Tokens (PATs) and implements security best practices. It uses regex-based parsing instead of shell-sourcing for environment files to prevent code injection, automatically enforces restrictive file permissions (chmod 600), and ensures credential files are added to .gitignore.
Audit Metadata