gh-repo-bootstrap

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script executes system commands like git and gh using subprocess.run with a list of arguments, which is a secure pattern that avoids shell injection risks.\n- [COMMAND_EXECUTION]: It performs input validation using regular expressions for repository names, owners, and remote names, ensuring that only allowed characters are processed.\n- [COMMAND_EXECUTION]: The script includes logic to resolve and verify file paths, ensuring that new project directories are created within the intended projects root and preventing directory traversal.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 07:07 AM
Security Audit — agent-trust-hub — gh-repo-bootstrap