shunk031-cgd-dev-identity
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces strong secret hygiene by directing the agent to use the
GH_TOKENenvironment variable only for individual commands, explicitly prohibiting persistent export or printing of tokens. - [SAFE]: The instructions include mandatory pre-flight checks to verify that the repository belongs to the authorized organization and that the account has sufficient push permissions before attempting any write actions.
- [SAFE]: Identity management is handled safely by overriding git configurations per-command (using
git -c) rather than modifying shared global or local configuration files, which prevents identity leakage across concurrent sessions. - [SAFE]: The scope of the skill is strictly restricted to a specific GitHub organization, ensuring that the machine user credentials and identity are never applied to unauthorized hosts or personal repositories.
Audit Metadata