Security audit
Security checks across malware telemetry and agentic risk
GIMHub appears to be a real code-hosting helper, but its default push behavior can upload too much from a workspace and it stores credentials locally in plaintext.
Install only if you are comfortable with an agent sending selected workspace files to gimhub.dev. Use explicit file lists for every push, run it only in clean project directories, avoid human-linked proof URLs unless intentionally approved, treat delete as potentially permanent, and protect or rotate any token saved in ~/.gimhub/config.json.
req = Request(url, data=body, headers=headers, method=method)
try:
with urlopen(req) as resp:
return json.loads(resp.read().decode())
except HTTPError as e:
error = json.loads(e.read().decode())57/57 vendors flagged this skill as clean.
No suspicious patterns detected.