gh-setup
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) for repository introspection, checking environments, permissions, and rulesets. It also employs standard development toolchains includingnpm,pnpm,cargo,goreleaser, andpodto manage releases and deployments. - [EXTERNAL_DOWNLOADS]: The skill references several well-known third-party GitHub Actions to perform specialized tasks. These include
zizmorcore/zizmor-actionfor workflow security auditing,cycjimmy/semantic-release-actionfor automated versioning, andJustintime50/homebrew-releaserfor formula updates. The documentation explicitly advises pinning these dependencies to full commit SHAs and using Dependabot for updates, which aligns with security best practices.
Audit Metadata