openclaw-github-repo-commander
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled shell script (
scripts/repo-audit.sh) to perform repository analysis. This script is restricted to read-only operations (usingfindandrg) to detect issues like hardcoded secrets, build artifacts, and broken documentation links. It does not perform any write or delete operations autonomously. - [DATA_EXPOSURE]: The audit script scans for common secret patterns (e.g., GitHub tokens, AWS keys, OpenAI keys) but only reports their presence to the user as part of the audit process. It does not transmit this data externally.
- [REMOTE_CODE_EXECUTION]: The skill uses standard
git cloneandghCLI commands which rely on the user's existing local authentication and environment. No external or unverifiable code is downloaded or executed. - [EXTERNAL_DOWNLOADS]: The skill references repositories from well-known services (GitHub) for comparison and analysis, which is the primary purpose of the skill.
Audit Metadata