differential-review-skill
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate security auditing utility. No malicious instructions, obfuscation, or unauthorized data access patterns were identified during the analysis.
- [EXTERNAL_DOWNLOADS]: The skill fetches workflow configuration and file content from GitHub's official API using the
ghCLI. These operations are restricted to well-known service domains and are necessary to support remote repository auditing. - [COMMAND_EXECUTION]: Utilizes
gh apivia theBashtool to retrieve repository metadata. The skill incorporates explicit defensive instructions to treat all fetched content as untrusted text and strictly prohibits its execution, effectively mitigating risks associated with processing external workflow data.
Audit Metadata