github-actions[bot]
published Jul 8, 2026, 9:40 PM · updated Jul 8, 2026, 9:40 PM
Daily Runtime Threat Scan
Security review complete. Verdict: clean. All network traffic is limited to github.com and api.github.com for the github/gh-aw repo. SHA256 checksum validation is present. GH_TOKEN is only passed as an env var for the gh CLI (standard practice). Install target is the canonical gh extensions directory. No obfuscation, no external URLs, no telemetry, no exfiltration patterns detected across all three files.
Generated from Daily Runtime Threat Scan · 220 AIC · ⊞ 36.4K · ◷