github
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
The skill documents the use of a local GitHub API emulator. It utilizes npx to run the emulate package, which is consistent with the author's (vercel-labs) known tooling ecosystem. Security best practices are mentioned, such as advising users to keep secret snapshots private and explaining how the tool manages file permissions for generated secrets. The API interactions are performed against localhost, and there are no instances of hardcoded credentials or unauthorized data exfiltration. The use of npx to run a tool from a trusted vendor context is considered safe.
Audit Metadata