rhdh-upgrade-helper
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches RHDH plugin metadata and release notes from official sources including Red Hat's documentation domain (docs.redhat.com) and the redhat-developer organization on GitHub.
- [COMMAND_EXECUTION]: Utilizes system utilities such as
git,gh, andlynxto retrieve data from trusted external repositories and documentation sites. It also usespython3to parse local YAML configuration files. - [CREDENTIALS_UNSAFE]: The skill implements a security best practice by scanning user-provided configuration files for embedded secrets (API keys, tokens, passwords) before any analysis takes place, replacing detected values with placeholders in the output.
- [DATA_EXFILTRATION]: Network operations are restricted to well-known and trusted services (GitHub, Red Hat Documentation, and Jira) for the purpose of retrieving product context and known bug data.
Audit Metadata