github-release

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes standard command-line tools including git, gh, and npm to manage repository state and automate the publishing process. These operations are essential for the skill's primary function of release management.
  • [COMMAND_EXECUTION]: Runs npm run build and node -p, which involves executing code and configuration defined within the project being released (e.g., package.json). This is routine for build and deployment workflows.
  • [SAFE]: Incorporates strong security-first practices by mandating secret scans with gitleaks and performing manual checks for hardcoded API keys or tokens in configuration files before publication.
  • [SAFE]: Includes validation logic for project metadata, ensuring that mandatory files like LICENSE, README.md, and .gitignore are correctly configured to prevent the accidental exposure of personal artifacts or sensitive data.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 11:03 AM