skills/metarhia/skills/npm-publish/Gen Agent Trust Hub

npm-publish

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill implements a standard software release workflow. It includes explicit instructions to avoid autonomous execution of sensitive commands like npm publish or git push, ensuring the user retains control over the final release steps.
  • [COMMAND_EXECUTION]: The skill uses established development tools such as npm, npx, and git for project-specific tasks like running tests, auditing dependencies, and retrieving commit history. These commands are typical for the stated purpose of release preparation.
  • [EXTERNAL_DOWNLOADS]: The skill executes npm i to ensure project dependencies are installed. This involves downloading packages from the official npm registry based on the project's configuration, which is standard behavior for the release preparation process.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 07:50 AM