gh-bootstrap
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (gh) to query repository metadata and apply configuration changes via the GitHub REST API, which is the intended and transparent function of the tool.
- [REMOTE_CODE_EXECUTION]: The skill scaffolds a GitHub Actions workflow for automated releases. It mitigates supply chain risks by pinning the actions/checkout action to a specific commit SHA and using a two-job architecture to separate code checkout from write-access operations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository state and user-supplied strings to configure rulesets. It avoids command or JSON injection vulnerabilities by using jq for payload construction and relying on the authenticated gh CLI environment for repository identifiers.
Audit Metadata