update-screenshots
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill executes several shell commands to manage files and interact with version control.
- GitHub CLI Integration: It uses
gh run listandgh run downloadto fetch data from GitHub Actions. This is a standard procedure for synchronizing CI outputs with a local environment. - File Management: Commands like
rm,cp, andcatare used to manipulate temporary files and display reports. These are routine operations within the intended workflow. - Git Operations: The skill automates
git addandgit committo finalize the baseline updates, which is the core function of the skill. - External Downloads: The skill downloads artifacts directly from GitHub's infrastructure using the authenticated
ghCLI. These downloads originate from the repository's own CI workflows, which is a trusted source for this specific automation task. - Data Ingestion Considerations: The skill reads a markdown report (
report.md) generated during the CI process to display information to the user. While this involves processing external data, the content is only displayed and not executed, presenting minimal risk in this context.
Audit Metadata