github-packages-npm
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill provides secure configuration templates that use environment variable substitution (e.g., '${NODE_AUTH_TOKEN}') to prevent hardcoding of authentication tokens in configuration files like '.npmrc'.
- [REMOTE_CODE_EXECUTION]: References to external resources are limited to official GitHub services (npm.pkg.github.com) and well-known GitHub Actions (actions/setup-node@v4), which are standard for the described use case.
- [COMMAND_EXECUTION]: The skill suggests routine development commands such as 'npm publish' and 'npm install' within the context of package management.
- [PROMPT_INJECTION]: No malicious instructions designed to override agent behavior or bypass safety constraints were detected.
Audit Metadata