gh-cli
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to download the official GitHub CLI installation script and GPG keyring from the well-known
cli.github.comdomain. - [COMMAND_EXECUTION]: Includes a vast library of command examples for interacting with GitHub via the CLI, covering repository management, issues, pull requests, and GitHub Actions. These are standard operations for the tool's intended use-case.
- [CREDENTIALS_UNSAFE]: References legitimate authentication methods such as the
GH_TOKENenvironment variable andgh auth login, which are core components of the GitHub CLI's security model for managing access tokens. - [DYNAMIC_EXECUTION]: Provides instructions for shell completion integration using
eval, which is a routine and expected pattern for CLI tool shell setup. - [PRIVILEGE_ESCALATION]: Mentions the use of
sudowithin Linux installation commands to facilitate package management, adhering to standard system administration practices.
Audit Metadata