gh-image
Fail
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill installs an external command-line extension using
gh extension install drogers0/gh-image. This downloads and executes code from an unverified community repository at runtime. - [CREDENTIALS_UNSAFE]: The skill documentation and logic revolve around the use of the
user_sessioncookie andGH_SESSION_TOKEN. As noted in the skill itself, these credentials provide full account access rather than scoped permissions, creating a high-risk surface for credential exposure or misuse if the environment is compromised. - [COMMAND_EXECUTION]: The skill heavily relies on shell command execution for its core functionality. It uses subshells and variable interpolation (e.g.,
MD="$(gh image ...)") to process data, which increases the risk of command injection if file paths or repository names are influenced by untrusted external input. - [EXTERNAL_DOWNLOADS]: The setup process requires fetching code from a remote third-party source (
github.com/drogers0/gh-image) which is not a pre-verified or official vendor repository.
Recommendations
- AI detected serious security threats
Audit Metadata