skills/peachest/skills/wizard/Gen Agent Trust Hub

wizard

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill generates and executes local bash scripts. These scripts use standard system commands like tput, grep, mktemp, and gh (GitHub CLI). These are used for UI formatting, environment file management, and interacting with the user's own GitHub repositories.
  • [CREDENTIALS_UNSAFE]: While the skill handles secrets, it implements safe patterns: using read -rs for hidden input (ask_secret), writing environment files with umask 077 (mode 0600) to ensure local private access, and utilizing the official GitHub CLI (gh secret set) for transmitting secrets to CI environments. It does not hardcode any actual credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 10:43 AM