qe-release
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a series of shell commands for repository and release management, including 'git', 'npm', 'node', and 'gh' (GitHub CLI) to perform versioning, building, and publishing tasks.
- [COMMAND_EXECUTION]: Runs a locally built JavaScript bundle ('v3/dist/cli/bundle.js') to verify the CLI and MCP functionality in a temporary environment ('/tmp/aqe-release-test') before finalizing the release.
- [SAFE]: Implements mandatory user confirmation gates ('STOP' points) before every phase of the release process, ensuring that the human operator remains in control of critical actions.
- [SAFE]: Ingests project metadata from local files ('package.json', 'CHANGELOG.md') to generate release documentation. This represents a standard release automation pattern and is mitigated by manual review checkpoints.
Audit Metadata