gh-bootstrap
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill acts as a declarative configuration utility, performing standard repository setup tasks that align with its stated purpose.
- [EXTERNAL_DOWNLOADS]: The skill scaffolds a GitHub Actions workflow that references the official
actions/checkoutaction. It correctly uses a full commit SHA (de0fac2e4500dabe0009e67214ff5f5447ce83dd) for versioning, which is a key security measure to protect against supply chain compromises. - [COMMAND_EXECUTION]: It leverages the
ghandgitcommand-line interfaces to interact with GitHub's APIs and manage local configuration files, which is necessary for automating repository management.
Audit Metadata