wizard
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes local bash scripts. These scripts use standard system commands like
tput,grep,mktemp, andgh(GitHub CLI). These are used for UI formatting, environment file management, and interacting with the user's own GitHub repositories. - [CREDENTIALS_UNSAFE]: While the skill handles secrets, it implements safe patterns: using
read -rsfor hidden input (ask_secret), writing environment files withumask 077(mode 0600) to ensure local private access, and utilizing the official GitHub CLI (gh secret set) for transmitting secrets to CI environments. It does not hardcode any actual credentials.
Audit Metadata