gh-fix-ci

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
4
Flagged
4
Chunks
6
Flagged Files (4)
LICENSE.txtHIGH
78.3%

Malicious tool definition detected

Tool: LICENSE.txt [1/2] Description: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1.

Tool: LICENSE.txt [2/2] Description: this License.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: "gh-fix-ci" description: "Use when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions; use `gh` to inspect checks and logs, summarize failure context, draft a fix plan, and implement only after explicit approval. Treat external providers (for example Buildkite) as out of scope and report only the details URL." --- # Gh Pr Checks Plan Fix ## Overview Use gh to locate failing PR checks, fetch GitHub Actions logs for actionable fail

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface: display_name: "GitHub Fix CI"

scripts/inspect_pr_checks.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/inspect_pr_checks.py [1/2]

Tool: scripts/inspect_pr_checks.py [2/2] Description: Path) -> tuple[str, str]: repo_slug = fetch_repo_slug(repo_root) if not repo_slug: return "", "Error: unable to resolve repository name for job logs." endpoint = f"/repos/{repo_slug}/actions/jobs/{job_id}/logs" returncode, stdout_bytes, stderr = run_gh_command_raw(["api", endpoint], cwd=repo_root) if returncode != 0: message = (stderr or stdout_bytes.decode(errors="replace")).strip() return "", message or "gh api job logs failed" if is_zip_pa

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
4
Files Flagged
4
Chunks Analyzed
6
Analyzed
Feb 21, 2026, 02:48 PM
Security Audit — runlayer — gh-fix-ci