Security audit
Security checks for vulnerabilities and agentic risk
This is a small GitHub CLI helper skill whose risky commands are visible and aligned with GitHub work, but users should approve any repository-changing action.
Install only if you want Codex to help operate GitHub through the gh CLI. Make sure gh is authenticated to the correct GitHub account, and require clear confirmation before commands that merge PRs, create or close issues, post comments, or rerun workflows.
The skill documents state-changing GitHub operations like gh pr merge 55 --repo owner/repo --squash without any warning, confirmation guidance, or instruction to verify target repo/PR before execution. In an agent setting, this increases the chance of unintended repository modifications because the command is presented as a normal read/write workflow alongside safe read-only commands.
The documented gh issue close 42 --repo owner/repo --comment "Fixed in ..." command performs a remote state change but is shown without cautionary language or approval requirements. In the context of an automation skill, this can lead to accidental closure of issues, disruption of project workflow, or unauthorized modifications if an agent acts on ambiguous instructions.
The skill includes gh run rerun <run-id> --repo owner/repo --failed without noting that rerunning CI triggers remote workflow execution and may consume resources or execute untrusted workflow logic. While less destructive than merges or issue closure, it still initiates an external action and is risky in an agent-operated environment if done without user awareness.
No suspicious patterns detected.
