skills/ryoppippi/ccusage/fix-ci/Gen Agent Trust Hub

fix-ci

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI tool (gh) to list PR checks (gh pr checks), view PR metadata (gh pr view), and retrieve logs from failed CI runs (gh run view --log-failed). These are standard developer operations.
  • [DATA_EXPOSURE]: Accesses CI logs and job metadata. While CI logs can occasionally contain sensitive data if a pipeline is misconfigured, the skill uses this information for legitimate debugging and troubleshooting purposes.
  • [INDIRECT_PROMPT_INJECTION]: Ingests external data from GitHub Actions logs. While logs represent an untrusted data source that could theoretically contain malicious instructions, this is a standard risk for diagnostic tools and is managed by the underlying agent's security boundaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 07:20 AM
Security Audit — agent-trust-hub — fix-ci