Peter Ci Gate

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:13 PM UTC
• Version:
  1.1.0

Overview

This is a transparent GitHub CI helper, with the main caution that it may rerun a flaky workflow once.

Before installing, make sure you are comfortable with the skill using your GitHub CLI login to inspect PR checks and failed logs. Treat any workflow rerun as a remote state-changing action and ask the agent to confirm before running it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 93% confidence
• Finding: The skill explicitly includes a state-changing remote action (`gh run rerun <run-id>`) but does not require explicit user confirmation or warn that it will modify CI workflow state. In a CI gate context, rerunning jobs can consume resources, alter audit trails, and create pressure to treat a flaky rerun as sufficient evidence for merge readiness, so the omission is security-relevant even if the action is operationally legitimate.

VirusTotal

66/66 vendors flagged this skill as clean.