update-supported-os

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
  • External Tool Installation: The skill requires the installation of the release-notes tool from a GitHub Packages repository and markdownlint-cli via npm. These tools are used for verifying OS lifecycle data and ensuring documentation quality. While downloading external tools is a standard part of this maintenance workflow, it introduces dependencies on these package sources.- Credential Storage Practice: Instructions are provided for authenticating with GitHub Packages using a Personal Access Token (PAT). One suggested command uses the --store-password-in-clear-text flag, which saves the token in plain text in the local NuGet configuration file. This is a common requirement for the dotnet CLI when using private sources but should be used with awareness of the local environment's security.- Automated Data Retrieval: The skill uses curl to fetch JSON data from several official repositories, including the .NET core release notes on GitHub and the Microsoft Container Registry. This data is used to validate the current support status of various operating systems, relying on the availability and integrity of these external endpoints.- CLI Tool Integration: The workflow involves executing CLI tools (release-notes, markdownlint, git, gh) to perform verification, generation, and submission of changes. These actions are scoped to the repository's maintenance requirements and are used to automate the audit process.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 10:37 PM