todo-scan
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitandgh(GitHub CLI) commands to inspect the local repository environment. - It executes
git grepto find annotations like TODO, FIXME, HACK, and XXX within the source code. - It executes
git logandgit statusto identify recent activity and repository state. - It executes
gh issue list,gh pr list, andgh run listto fetch issue, pull request, and CI status from GitHub if the tool is available. - These operations are limited to read-only metadata retrieval within the current repository context.
Audit Metadata