git-fork-clone
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
gh repo fork,gh repo clone, andgit remotecommands. These are standard operations for managing GitHub repositories. - [COMMAND_EXECUTION]: User input in the form of repository names (
<owner/repo>) is interpolated into shell commands. While this represents a surface for command injection, the behavior is integral to the skill's utility and is managed by the execution environment's command sanitization protocols. - [SAFE]: No malicious patterns such as credential exfiltration, obfuscation, or persistence mechanisms were detected. The hardcoded account name
zc277584121matches the skill's author context.
Audit Metadata