github-tools-agents
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- GitHub API Integration: The skill enables agents to perform GitHub operations through the
@github-tools/sdkpackage. This allows for tasks like code reviews, issue triaging, and repository exploration using official vendor tools. - Reference Search Utility: A Python script (
scripts/search_references.py) is provided to help the agent quickly locate relevant information within thereferences/directory. This script includes security-minded design choices: - Path Validation: It verifies that resolved file paths remain within the skill's root directory, preventing accidental access to files elsewhere on the system.
- Basic Sanitization: It implements a simple filter to omit common instruction-like patterns from the search results, which helps maintain the agent's focus on context rather than new commands.
- Security Configuration: The documentation emphasizes the use of fine-grained Personal Access Tokens (PATs) and configurable approval flows for write operations, ensuring that destructive actions typically require human intervention.
Audit Metadata