gh-version-control-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on local execution of
gitandgh(GitHub CLI) commands to manage development workflows. This includes creating worktrees, committing changes, and managing pull requests. These operations are the primary intended function of the skill. - [EXTERNAL_DOWNLOADS]: The skill interacts with GitHub's remote servers through standard git operations (
fetch,pull,push) and theghCLI. All remote interactions are targeted at a well-known service (GitHub) for legitimate code synchronization purposes. - [REMOTE_CODE_EXECUTION]: No patterns of downloading and executing arbitrary remote scripts or binary payloads were found. The skill uses pre-defined local scripts for all operations.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found in the scripts or documentation. The skill relies on the user's existing GitHub CLI (
gh) authentication state.
Audit Metadata