gh-aw-adoption
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches workflow templates and configuration guidelines from the official GitHub gh-aw repository, which is a well-known and trusted source. These downloads are performed using the gh api and are used as references for local workflow creation.\n- [COMMAND_EXECUTION]: Employs standard git and gh (GitHub CLI) commands to manage repository branches, commit changes, and interact with GitHub Actions. These commands are necessary for the skill's stated purpose of workflow automation and management.\n- [REMOTE_CODE_EXECUTION]: Automates the compilation of markdown-based workflow definitions into executable GitHub Actions using the gh-aw extension. This process includes validation steps and targets trusted templates, ensuring that the generated code follows established security patterns like sandboxing and safe-outputs.
Audit Metadata