create-ol-rfc-discussion
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script (
scripts/post-rfc-discussion.sh) that invokes the GitHub CLI (gh api graphql) to post discussion content. This is the primary and intended function of the skill.\n- [COMMAND_EXECUTION]: The skill instructions includewc -wto verify word counts of local temporary files, which is a benign utility operation.\n- [DATA_EXPOSURE]: The skill uses hardcoded repository and category IDs for themitodl/hqrepository. These are public identifiers and do not constitute a credential leak or sensitive data exposure.
Audit Metadata