fix-ci
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI tool (
gh) to list PR checks (gh pr checks), view PR metadata (gh pr view), and retrieve logs from failed CI runs (gh run view --log-failed). These are standard developer operations. - [DATA_EXPOSURE]: Accesses CI logs and job metadata. While CI logs can occasionally contain sensitive data if a pipeline is misconfigured, the skill uses this information for legitimate debugging and troubleshooting purposes.
- [INDIRECT_PROMPT_INJECTION]: Ingests external data from GitHub Actions logs. While logs represent an untrusted data source that could theoretically contain malicious instructions, this is a standard risk for diagnostic tools and is managed by the underlying agent's security boundaries.
Audit Metadata