github-stale-ci-pr-closer
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements deterministic lifecycle management for GitHub pull requests using standard Python logic. As stated in the documentation, it does not utilize an LLM for decision-making, which eliminates the risk of prompt injection.
- [SAFE]: Network operations are restricted to the official GitHub API and platform-internal services (state store and execution callbacks) defined via environment variables.
- [SAFE]: File system access is limited to a dedicated directory within the workspace for persisting automation state records.
- [SAFE]: Sensitive data such as the GitHub Personal Access Token and internal API keys are handled securely through standard environment variables and are not exposed in logs or transmitted to unauthorized third parties.
Audit Metadata