nuget-trusted-publishing

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • [Project Metadata Assessment]: The skill reads repository files such as .csproj, Directory.Build.props, and server.json to identify package types and versions. This is a standard procedure for configuration tasks and is used here to provide tailored setup instructions for different package categories like MCP servers or dotnet tools.
  • [Workflow Automation]: The skill creates or modifies GitHub Actions workflows to implement trusted publishing. The provided templates correctly implement the principle of least privilege by requesting only necessary OIDC permissions (id-token: write) and recommending the use of GitHub Environments for secret scoping.
  • [Integration with Official Tools]: It utilizes official and well-known developer tools, including the .NET CLI (dotnet pack, dotnet nuget push) and established GitHub Actions from official repositories like actions/setup-dotnet and NuGet/login.
  • [Safety Checkpoints]: The skill includes explicit instructions to avoid deleting existing API keys or overwriting workflows without user confirmation, minimizing the risk of accidental data loss or service interruption during the migration process.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 04:14 PM