website-content-editor
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands via the
ghCLI to interact with the GitHub API (e.g.,gh api,gh auth status,gh pr create). It also usesnpm installandnpm run buildwithin a temporary directory to verify that changes do not break the website build before opening a pull request. These commands are part of a legitimate development workflow. - [EXTERNAL_DOWNLOADS]: During the build verification step, the skill clones the
timescale/timescale-websiterepository and usesnpm installto download necessary dependencies. These actions are performed on the vendor's own code and are consistent with the skill's stated purpose of managing website content.
Audit Metadata