sharing-skills

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard command-line tools including git for version control (branching, committing, pushing, rebasing) and gh for GitHub interactions (creating pull requests). These operations are consistent with the skill's stated purpose of contributing code to upstream repositories.- [SAFE]: The skill demonstrates security best practices by using quoted heredocs (e.g., cat <<'EOF') when handling multi-line strings for commit messages and pull request bodies. This prevents the shell from performing unintended variable expansion or command execution within the user-provided text.- [EXTERNAL_DOWNLOADS]: Mentions the GitHub CLI as a prerequisite and provides a link to the official documentation for manual installation. It does not contain any automated remote script execution or unverifiable third-party dependencies.- [DATA_EXFILTRATION]: Network operations are restricted to standard Git/GitHub workflows (pushing code to a fork and creating pull requests to an upstream repository). No evidence of unauthorized data harvesting or exfiltration to unknown domains was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 06:07 PM