prow

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/analyze_coverage.py executes local helper scripts using subprocess.run to fetch lifecycle data in JSON format.
  • [COMMAND_EXECUTION]: The utility module scripts/rhdh_prow/yaml.py uses subprocess.run to execute the GitHub CLI (gh api) to retrieve repository file lists when working in remote mode.
  • [EXTERNAL_DOWNLOADS]: Several scripts fetch data from external sources, including Red Hat's official lifecycle API (access.redhat.com) and raw content from GitHub (raw.githubusercontent.com). These sources are well-known and trusted for the skill's stated purpose of CI management.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 09:55 AM
Security Audit — agent-trust-hub — prow