github-push
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the GitHub CLI from its official domain (
cli.github.com) for macOS and using the Windows Package Manager (winget) for Windows installations. - [DATA_EXPOSURE]: The skill emphasizes security by instructing the agent to always use the
--privateflag when creating repositories, ensuring code is not publicly exposed by default. - [DATA_EXPOSURE]: The skill includes security remediation guidance for handling sensitive information, specifically detailing how to remove accidentally committed
.env.localfiles from the git cache and advising the user to rotate exposed credentials.
Audit Metadata