nuget-trusted-publishing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- NuGet Trusted Publishing Configuration: The skill safely guides users through transitioning from static, long-lived API keys to short-lived OpenID Connect (OIDC) tokens via the
NuGet/login@v1GitHub Action. - Standard Workflow Templating: Provides a standard, transparent YAML workflow template targeting official infrastructure (
https://api.nuget.org/v3/index.json) without modifying system configurations or initiating hidden remote commands. - Defensive Safeguards: Contains specific troubleshooting guidance advising against premature deletion of fallback secrets, promoting safer operational redundancy until the OIDC mechanism is fully verified.
Audit Metadata