gh-pr-image
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill uses standard GitHub CLI (
gh) commands to perform documented actions on a user's repository. - [DATA_EXPOSURE_AND_EXFILTRATION]: All network operations are directed towards GitHub APIs and repositories, which are whitelisted/well-known services. The skill interacts with temporary local files (e.g.,
/tmp/before.png) which is standard practice for image processing and does not involve sensitive configuration files. - [COMMAND_EXECUTION]: The shell commands provided in the documentation are for legitimate repository management tasks. There is no evidence of arbitrary command injection or unauthorized remote code execution.
- [OBFUSCATION]: The instructions and code blocks are clear, plain-text markdown and bash, with no hidden characters, encoding, or homoglyph attacks.
Audit Metadata