lovstudio-gh-access
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
gh apicommands to manage repository access. This involves querying user information, searching for accounts by email, and issuing PUT/DELETE requests to the GitHub API. These commands are necessary for the skill's primary function and are performed using the user's authenticated CLI session. - [SAFE]: The skill incorporates robust safety guardrails: it defaults to the lowest permission level ('pull'), requires a resolution table to be shown to the user before any changes are made, and demands explicit confirmation for granting 'admin' or 'maintain' roles and for removing collaborators.
- [SAFE]: Identification and verification logic is used to ensure that actions are taken on intended GitHub accounts. For organizational repositories, it correctly handles email invitations as a fallback while notifying the user when this feature is unavailable for personal repositories.
Audit Metadata