repo-ci
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/repo-ciutility performs local repository audits and configuration tasks using standard shell commands such asgrep,sed, andcat. It also interacts with the GitHub CLI (gh) to manage branch protection rulesets, which is consistent with its stated administrative purpose. - [EXTERNAL_DOWNLOADS]: The skill configures CI/CD pipelines that leverage official and well-known GitHub Actions from trusted organizations, including
actions/checkout,gitleaks/gitleaks-action,pypa/gh-action-pypi-publish, andcodecov/codecov-action. These downloads are performed from trusted technology providers. - [REMOTE_CODE_EXECUTION]: Code execution is limited to the context of GitHub Actions runners for build, test, and deployment purposes. The templates use standard language toolchains (Python, Node.js) and official registries (PyPI, npm) to install project-specific dependencies.
- [DATA_EXFILTRATION]: The skill demonstrates safe handling of sensitive integration tokens like
GITHUB_TOKENandCODECOV_TOKENby utilizing the standard GitHub Actions secret management system. No unauthorized network operations or data transmissions were detected.
Audit Metadata