prow
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/analyze_coverage.pyexecutes local helper scripts usingsubprocess.runto fetch lifecycle data in JSON format. - [COMMAND_EXECUTION]: The utility module
scripts/rhdh_prow/yaml.pyusessubprocess.runto execute the GitHub CLI (gh api) to retrieve repository file lists when working in remote mode. - [EXTERNAL_DOWNLOADS]: Several scripts fetch data from external sources, including Red Hat's official lifecycle API (
access.redhat.com) and raw content from GitHub (raw.githubusercontent.com). These sources are well-known and trusted for the skill's stated purpose of CI management.
Audit Metadata