github
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of the official GitHub CLI (
gh) for repository management. All commands described are standard operations for interacting with GitHub's API.\n- [SAFE]: Installation procedures leverage reputable package managers (brewandapt) to install theghbinary, which is a trusted, well-known tool.\n- [SAFE]: Secret management is handled via the officialgh auth loginmechanism, which is the standard and safe way to manage GitHub credentials locally.\n- [SAFE]: While the skill reads untrusted data from GitHub (such as issue bodies and workflow logs), this is a fundamental requirement of its intended purpose. The risk of indirect prompt injection is inherent to such tools and is mitigated by the agent's core safety features.
Audit Metadata