sharing-skills
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard command-line tools including
gitfor version control (branching, committing, pushing, rebasing) andghfor GitHub interactions (creating pull requests). These operations are consistent with the skill's stated purpose of contributing code to upstream repositories.- [SAFE]: The skill demonstrates security best practices by using quoted heredocs (e.g.,cat <<'EOF') when handling multi-line strings for commit messages and pull request bodies. This prevents the shell from performing unintended variable expansion or command execution within the user-provided text.- [EXTERNAL_DOWNLOADS]: Mentions the GitHub CLI as a prerequisite and provides a link to the official documentation for manual installation. It does not contain any automated remote script execution or unverifiable third-party dependencies.- [DATA_EXFILTRATION]: Network operations are restricted to standard Git/GitHub workflows (pushing code to a fork and creating pull requests to an upstream repository). No evidence of unauthorized data harvesting or exfiltration to unknown domains was found.
Audit Metadata