shunk031-github-cgd-identity
Warn
Audited by Socket on Sep 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Mostly coherent GitHub-identity automation for one organization, with official GitHub CLI usage and no obvious third-party exfiltration. The main risk is the unverifiable local setup-gh-cgd bootstrap command plus raw token retrieval/forwarding, which elevates overall security risk even though the skill does not show confirmed malicious intent.
Confidence: 84%Severity: 72%
Audit Metadata