What the reviewer found
Standard GitHub auth setup: it creates a personal access token or a new ed25519 SSH key for the user's own account, and the ls ~/.ssh check is only to see whether a key already exists before generating one. The curl call uses the user's own token against GitHub's own api.github.com.
network— calls the vendor’s API
What was read
The file as it ships in AtlasOmnia/hermes-custom-pack:
skills/github-auth/SKILL.md
What the static scan said
The scan flagged 4things. The reviewer kept 0 and dismissed 4 as false.
E3Enumerates the file system for secrets — false positivePE2Asks for root — false positivePE3Reaches for credential files — false positiveNETMakes network calls — false positive
How this review was made
Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.