Security audit
logo-generator
Security checks for vulnerabilities and agentic risk
Overview
This is a simple GitHub CLI helper, but it is published under a logo-generator identity, which could mislead users before it uses their local GitHub access.
Install only if you intended to add a GitHub CLI helper, not a logo generator. Before using it, verify which GitHub account `gh` is logged into, use explicit `--repo owner/repo` targets, and manually review any command that writes, deletes, merges, dispatches workflows, or uses raw `gh api`.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.