rhdh

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a Python-based CLI to execute local development tools.
  • Evidence: rhdh/cli.py and rhdh/config.py utilize subprocess.run to call git, gh, podman, and docker for environment auditing and repository management.
  • Reasoning: All commands use list-based arguments without shell interpolation, following secure coding practices.
  • [EXTERNAL_DOWNLOADS]: The skill manages project repositories by configuring them as git submodules.
  • Evidence: rhdh/config.py identifies several official repositories under the 'redhat-developer' GitHub organization and internal Red Hat GitLab instances.
  • Reasoning: These operations are consistent with the skill's purpose and target the author's official infrastructure.
  • [SAFE]: Analysis of the skill's tracking system, configuration logic, and routing revealed no malicious patterns or data exfiltration risks. Activity logs and todos are maintained exclusively on the local filesystem.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 02:29 PM
Security Audit — agent-trust-hub — rhdh