finops-caches
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script and uses the
git remote get-url origincommand via dynamic context injection to identify the current repository. These actions are standard for development-focused skills and perform no sensitive operations. - [EXTERNAL_DOWNLOADS]: The skill interacts with official GitHub API endpoints (
api.github.com) using thegh apitool to retrieve cache metadata and storage statistics. - [SAFE]: No indicators of credential theft, remote code execution from untrusted sources, or data exfiltration were found in the provided files.
Audit Metadata