github-readme

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Ruby script (scripts/github_readme_audit.rb) intended to be run by the user to audit their local README files. The execution is transparent and scoped to file analysis (reading the provided file and checking for specific markdown patterns like headings and code blocks). No dangerous system calls or shell injections were found in the script's logic.
  • [EXTERNAL_DOWNLOADS]: The skill mentions and demonstrates advanced GitHub Flavored Markdown (GFM) features, such as embedding SVGs or diagrams. While these involve external image references (<img src="header-light.svg">), they are standard markdown practices and do not involve untrusted remote code execution or data exfiltration.
  • [NO_CODE]: Although the skill contains a Ruby script, it is used locally for auditing purposes and does not introduce runtime dependencies, persistence mechanisms, or obfuscated payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 12:25 PM