verasic-github-governance-init
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
factory.shscript orchestrates the setup process by executing multiple bash scripts (e.g.,bootstrap-repo.sh,wire-hooks.sh, anddoctor.sh) located in sibling skill directories. - [DYNAMIC_EXECUTION]: The skill dynamically identifies the installation paths of required sibling skills, such as
verasic-github-governanceandverasic-github-cli-init, within the.agents/skills/or.cursor/skills/directories to execute their respective scripts. - [COMMAND_EXECUTION]: The orchestrator performs standard Git operations (
git commit,git push) and GitHub CLI operations (gh pr create) to manage repository state and propose governance changes via pull requests. - [SAFE]: The skill implements a 'plan-first' approach by default, displaying intended actions and requiring an explicit
--yesflag from the user before applying any changes to the repository, which provides a necessary human-in-the-loop security checkpoint.
Audit Metadata