publish-project-to-github
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official and trusted tools, including the GitHub CLI (gh) and Git, to manage repository operations. All network interactions target GitHub, which is recognized as a well-known and trusted service.\n- [SAFE]: The skill includes a dedicated shell script (audit_public_project.sh) that must be run before publication. This script proactively scans for sensitive files (e.g., .env, private keys) and potential credential material (e.g., API tokens, AWS keys) using regex patterns, blocking the workflow if issues are detected.\n- [SAFE]: The instructions mandate explicit user authorization for repository creation and visibility settings, ensuring that projects are only made public when intended by the user.
Audit Metadata