setup-crap-check
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill generates a local git pre-commit hook at
.git/hooks/pre-commitand applies execution permissions usingchmod +x. This is a standard and necessary step for installing git hooks and is performed only after user confirmation. - [EXTERNAL_DOWNLOADS]: The generated GitHub Actions workflows utilize well-known official actions from the 'actions' organization on GitHub for setting up language environments. For Go projects, the workflow includes an installation step for the utility
github.com/jandelgado/gcov2lcovto process coverage data, which is a common practice in Go CI/CD pipelines. - [SAFE]: No malicious patterns such as prompt injection, credential exfiltration, or obfuscated instructions were detected. The skill's functionality matches its description, and it operates within the expected scope of a repository maintenance tool.
Audit Metadata