skills/hjewkes/agent-skills/repo-ci/Gen Agent Trust Hub

repo-ci

Pass

Audited by Gen Agent Trust Hub on Feb 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/repo-ci utility performs local repository audits and configuration tasks using standard shell commands such as grep, sed, and cat. It also interacts with the GitHub CLI (gh) to manage branch protection rulesets, which is consistent with its stated administrative purpose.
  • [EXTERNAL_DOWNLOADS]: The skill configures CI/CD pipelines that leverage official and well-known GitHub Actions from trusted organizations, including actions/checkout, gitleaks/gitleaks-action, pypa/gh-action-pypi-publish, and codecov/codecov-action. These downloads are performed from trusted technology providers.
  • [REMOTE_CODE_EXECUTION]: Code execution is limited to the context of GitHub Actions runners for build, test, and deployment purposes. The templates use standard language toolchains (Python, Node.js) and official registries (PyPI, npm) to install project-specific dependencies.
  • [DATA_EXFILTRATION]: The skill demonstrates safe handling of sensitive integration tokens like GITHUB_TOKEN and CODECOV_TOKEN by utilizing the standard GitHub Actions secret management system. No unauthorized network operations or data transmissions were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 23, 2026, 04:17 PM