release-smoke-test

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard development and build tools including bun, npm, node, and opencode to pack and test the plugin candidate.
  • [SAFE]: The workflow demonstrates security best practices by using env -i to strip host environment variables during testing, preventing potential credential leakage or configuration interference from the host system.
  • [SAFE]: The skill operates on local artifacts (tarballs generated from the current branch) rather than downloading untrusted code from remote sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 11:01 AM