website-content-editor

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands via the gh CLI to interact with the GitHub API (e.g., gh api, gh auth status, gh pr create). It also uses npm install and npm run build within a temporary directory to verify that changes do not break the website build before opening a pull request. These commands are part of a legitimate development workflow.
  • [EXTERNAL_DOWNLOADS]: During the build verification step, the skill clones the timescale/timescale-website repository and uses npm install to download necessary dependencies. These actions are performed on the vendor's own code and are consistent with the skill's stated purpose of managing website content.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 01:21 PM