security-advisory
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes GitHub CLI commands to interact with the repository's security advisory API, allowing for the listing of reports and management of private forks.
- [EXTERNAL_DOWNLOADS]: Fetches source code from private forks created within the organization's GitHub space and installs necessary dependencies via npm install for locally verifying fixes.
- [REMOTE_CODE_EXECUTION]: Executes a local verification script (npm run local:gate) on the code within the private fork to ensure the fix passes the required gates before being merged into the main repository. This execution is performed on code managed by the vendor in a private environment.
Audit Metadata