rhdh
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python-based CLI to execute local development tools.
- Evidence:
rhdh/cli.pyandrhdh/config.pyutilizesubprocess.runto callgit,gh,podman, anddockerfor environment auditing and repository management. - Reasoning: All commands use list-based arguments without shell interpolation, following secure coding practices.
- [EXTERNAL_DOWNLOADS]: The skill manages project repositories by configuring them as git submodules.
- Evidence:
rhdh/config.pyidentifies several official repositories under the 'redhat-developer' GitHub organization and internal Red Hat GitLab instances. - Reasoning: These operations are consistent with the skill's purpose and target the author's official infrastructure.
- [SAFE]: Analysis of the skill's tracking system, configuration logic, and routing revealed no malicious patterns or data exfiltration risks. Activity logs and todos are maintained exclusively on the local filesystem.
Audit Metadata