release-changelog-harness
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for agents to interact with standard development and package management tools.
- Documentation includes commands for using
pnpm changeset,pnpm install, andgit committo manage package versioning and workspace updates. - [REMOTE_CODE_EXECUTION]: The skill documents a design pattern for binary distribution using shell scripts.
- It provides a blueprint for an
install.shscript to be executed viacurl | bash, which is a common pattern for distributing CLI tools. - The documentation specifically recommends security mitigations, such as SHA-256 integrity verification and idempotent modification of shell profiles (e.g.,
.bashrc,.zshrc) to safely update the system PATH. - [EXTERNAL_DOWNLOADS]: The skill references downloading configuration and scripts from reputable developer services.
- References include official GitHub repositories and documentation for tools like Changesets, Melos, and release-plz, as well as official ecosystem package registries.
Audit Metadata