moai-workflow-ci-watch
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the GitHub CLI (
gh) and local shell scripts (scripts/ci-watch/run.sh) to poll for PR status updates. This functionality is restricted to monitoring pull request metadata and is consistent with its stated purpose. - [EXTERNAL_DOWNLOADS]: Interacts with the GitHub API via the
ghtool to fetch PR check conclusions and provides links to GitHub Actions logs. These operations target a well-known service and are used for tracking development progress. - [SAFE]: No malicious patterns such as obfuscation, credential harvesting, or unauthorized data exfiltration were detected. The skill implements a structured state machine for workflow management and follows security best practices for CI automation.
Audit Metadata