Skip to content
Runesmith Hub

Runesmith Hub

GitHub

RunesmithOfficial0.1.0
Open in Runesmith

GitHub is unverified

GitHub hasn't been reviewed by Runesmith. Its code was checked automatically, but no person has read it. Plugins can access everything you can: your files, your projects and your accounts. Install it only if you trust Runesmith.

What it can do

  • Connects to the internet or other computers. Talks to GitHub to sign you in, list repositories and show pull requests.
  • Stores or reads passwords and tokens. Keeps your GitHub sign-in in your system's secret store.
  • Starts other programs. Opens GitHub in your browser, and can reuse the sign-in of the gh command.
  • Reads or writes files outside your project and its own storage. Caches avatars.
  • Reads environment variables, the registry or system settings. Finds the gh command on your PATH.

Runesmith will warn you again before installing.

Continue to Runesmith

Sign in to GitHub, clone from your account and organizations, open links and work with pull requests.

State
Published
Review
Reviewed on 9 Oct 2026
Published
9 Oct 2026
Runs on
Plugin API 0.1.0 to below 0.2.0
Tag
v0.1.0 (eb8b3a7)
Files
PackageSourceSBOM

Release notes

The first release of GitHub on the Runesmith Hub.

Tier

Official Published by Runesmith. Every version is read by an administrator before users get it.

Review

  • 0.1.0: Reviewed on 9 Oct 2026

Build provenance

Commit
eb8b3a7e2dc9
Reproducible
Two builds matched
Build
Build run with .NET SDK 10.0.401
Report
Build and analysis
Attestation
None yet
Contracts
RunesmithHub.Runesmith.GitHub.Contracts 0.1.0

Capabilities

  • Connects to the internet or other computers

    Talks to GitHub to sign you in, list repositories and show pull requests.

    The analysis found code that uses it.

  • Stores or reads passwords and tokensHigh risk

    Keeps your GitHub sign-in in your system's secret store.

    The analysis found code that uses it.

  • Starts other programsHigh risk

    Opens GitHub in your browser, and can reuse the sign-in of the gh command.

    The analysis found code that uses it.

  • Reads or writes files outside your project and its own storage

    Caches avatars.

    The analysis found code that uses it.

  • Reads environment variables, the registry or system settings

    Finds the gh command on your PATH.

    The analysis found code that uses it.

Network hosts: github.com, api.github.com, avatars.githubusercontent.com

Advisories

None.

Depends on

Nothing. It needs only Runesmith.

Used by

No plugins depend on it.