gh-cli
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill primarily provides instructions for the agent to execute shell commands using the GitHub CLI (
gh). It includes specific guidance on using flags like--yesand environment variables likeGH_PROMPT_DISABLED=1to ensure commands do not hang during non-interactive execution. - [EXTERNAL_DOWNLOADS]: In
references/skill-management.md, the skill documents thegh skill installcommand, which allows for the installation of agent skills from remote GitHub repositories. These references are presented as standard tool functionality for extending agent capabilities and utilize placeholder repository paths. - [SAFE]: The content across all files is purely instructional and follows established best practices for developer tooling. No evidence of credential harvesting, unauthorized file access, or malicious redirection was found.
Audit Metadata