nest-boot-skill-maintainer
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses GitHub CLI (
gh) for standard pull request and issue management tasks, such as checking status, listing issues, and creating PRs. These are typical administrative functions for a developer maintenance tool. - [COMMAND_EXECUTION]: The included Python scripts (
update_readme.py,validate_skills.py) perform static analysis of skill metadata and project structure. They do not execute external code or access sensitive files beyond the skill directory. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill documentation explicitly instructs users to desensitize data by removing tokens, internal domains, and customer data before contributing to the upstream repository.
- [SAFE]: The skill implements safety boundaries by requiring explicit user authorization for all external operations like creating issues or merging code. It also correctly routes framework-level bugs to a separate maintainer tool rather than attempting to mask them through skill modifications.
Audit Metadata