opensource-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed specifically to enhance security during the open-source release process. It implements a structured 'Sanitizer' agent that scans for secrets, PII, and internal references before any public release.
- [SAFE]: The 'Protocol' section mandates a safety gate (Step 4: Run Sanitizer Agent) where a 'FAIL' verdict halts the pipeline and requires user intervention to fix findings or abort.
- [SAFE]: The 'Anti-Patterns' section explicitly prohibits pushing to GitHub without user approval and forbids skipping the sanitizer, ensuring human-in-the-loop control over sensitive operations.
- [SAFE]: Command execution is limited to local staging directory management (mkdir) and standard GitHub CLI operations (gh repo create) which are triggered only upon explicit user approval in Step 7.
Audit Metadata