gh-cli
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for the official GitHub CLI, a well-known and trusted tool from a recognized organization.
- [PROMPT_INJECTION]: The guide includes a dedicated 'Security Best Practices' section that explicitly warns against command injection and provides instructions on how to safely sanitize input when using templates or filters.
- [EXTERNAL_DOWNLOADS]: Installation instructions reference fetching the GPG keyring from the official
cli.github.comdomain, which is the standard and recommended installation method for the tool. - [CREDENTIALS_UNSAFE]: The documentation follows best practices for secret management, advising users to never store tokens in plain text and recommending restricted file permissions (e.g.,
chmod 600) for token files. - [DATA_EXPOSURE]: While the tool interacts with sensitive data like SSH keys and authentication tokens, the skill provides clear guidance on secure handling and uses placeholders for all examples.
Audit Metadata