git-fork-clone

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute gh repo fork, gh repo clone, and git remote commands. These are standard operations for managing GitHub repositories.
  • [COMMAND_EXECUTION]: User input in the form of repository names (<owner/repo>) is interpolated into shell commands. While this represents a surface for command injection, the behavior is integral to the skill's utility and is managed by the execution environment's command sanitization protocols.
  • [SAFE]: No malicious patterns such as credential exfiltration, obfuscation, or persistence mechanisms were detected. The hardcoded account name zc277584121 matches the skill's author context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 07:56 AM