gh-bootstrap

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill acts as a declarative configuration utility, performing standard repository setup tasks that align with its stated purpose.
  • [EXTERNAL_DOWNLOADS]: The skill scaffolds a GitHub Actions workflow that references the official actions/checkout action. It correctly uses a full commit SHA (de0fac2e4500dabe0009e67214ff5f5447ce83dd) for versioning, which is a key security measure to protect against supply chain compromises.
  • [COMMAND_EXECUTION]: It leverages the gh and git command-line interfaces to interact with GitHub's APIs and manage local configuration files, which is necessary for automating repository management.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 02:46 AM
Security Audit — agent-trust-hub — gh-bootstrap