gh-repo-bootstrap
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script executes system commands like
gitandghusingsubprocess.runwith a list of arguments, which is a secure pattern that avoids shell injection risks.\n- [COMMAND_EXECUTION]: It performs input validation using regular expressions for repository names, owners, and remote names, ensuring that only allowed characters are processed.\n- [COMMAND_EXECUTION]: The script includes logic to resolve and verify file paths, ensuring that new project directories are created within the intended projects root and preventing directory traversal.
Audit Metadata