release
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Prompt Injection (SAFE): No instructions were found that attempt to override system prompts or bypass safety guidelines.
- Data Exposure & Exfiltration (SAFE): No hardcoded credentials or access to sensitive system paths (e.g., ~/.ssh, .env) were detected. The skill includes a specific warning to ensure no secrets are committed.
- Remote Code Execution (SAFE): There are no patterns involving the download and execution of remote scripts (e.g., curl|bash). The use of the GitHub CLI (
gh) andpnpmare for repository management tasks. - Privilege Escalation (SAFE): No commands requiring administrative or elevated privileges (like
sudo) are present. - Persistence Mechanisms (SAFE): The skill does not attempt to create cron jobs, modify shell profiles, or establish any other form of persistence.
Audit Metadata