npm-publish
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements a standard software release workflow. It includes explicit instructions to avoid autonomous execution of sensitive commands like
npm publishorgit push, ensuring the user retains control over the final release steps. - [COMMAND_EXECUTION]: The skill uses established development tools such as
npm,npx, andgitfor project-specific tasks like running tests, auditing dependencies, and retrieving commit history. These commands are typical for the stated purpose of release preparation. - [EXTERNAL_DOWNLOADS]: The skill executes
npm ito ensure project dependencies are installed. This involves downloading packages from the official npm registry based on the project's configuration, which is standard behavior for the release preparation process.
Audit Metadata