Confirm the source
Compare the repository, publisher, and installation command before continuing.
✓
Third-party audit
PassedGen Agent Trust Hub
boring-new-app · hachej/boring-stack
Provider summary
The skill automates GitHub repository setup using the 'Boring Factory' framework. It uses the GitHub CLI to manage secrets and settings, adhering to best practices by ensuring sensitive tokens are never displayed in chat. It executes an initialization tool from the author's GitHub repository. A minor risk exists where user-supplied inputs, such as repository titles, are used directly in shell commands.
The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- pass
- Risk level
- NONE
- Audited
- Oct 02, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.