github-workflow
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill automates standard development tasks including branching, committing, and pull request management using well-known CLI tools (git, GitHub CLI).
- [SAFE]: The instructions contain multiple critical warnings to prevent the accidental exposure of sensitive data, such as
.envfiles, API keys, and other credentials. - [SAFE]: Workflow commands for creating Pull Requests and Issues utilize HEREDOC syntax (
cat <<'EOF') for multi-line strings, which is a robust practice to prevent shell injection or unintended expansion of user-provided content. - [SAFE]: The skill maintains a clear separation between instructions and data templates, providing specific 'Reference' documents that define conventions and strategies without executing remote scripts.
- [SAFE]: No obfuscation, unauthorized network exfiltration, persistence mechanisms, or privilege escalation patterns were detected.
Audit Metadata