git-summarize-weekly

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute date for calculating weekly timeframes and the gh api command to retrieve event data. These are standard developer tools used for their intended purpose.
  • [EXTERNAL_DOWNLOADS]: The skill fetches user activity data from GitHub's official API. GitHub is a well-known and trusted service, and the data retrieval is scoped to public event history.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as commit messages, issue comments, and PR titles retrieved from the GitHub API.
  • Ingestion points: Data enters the context via the gh api users/zc277584121/events command output.
  • Boundary markers: None explicitly defined in the instructions.
  • Capability inventory: Uses Bash for data retrieval and date calculation; no file-write or persistent network operations are directed by the processed data.
  • Sanitization: No explicit sanitization of the API output is mentioned before summarization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 03:09 PM
Security Audit — agent-trust-hub — git-summarize-weekly