safe-settings
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone and install the
github/safe-settingsrepository. The provided GitHub Actions workflow (assets/full-sync.yml) also checks out this repository using a pinned version (2.1.17). These references target the official repository of a well-known technology service. - [COMMAND_EXECUTION]: Uses standard
ghandgitcommands for repository setup, variable configuration, and secret management. These operations are essential for the skill's stated purpose of managing GitHub organization settings. - [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive information by instructing users to store GitHub App private keys and secrets using
gh secret set. This follows security best practices for secret management in CI/CD environments. No hardcoded secrets were detected.
Audit Metadata