release-readiness-checklist
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development shell commands to detect build systems (e.g., 'make -qp', 'just --list'), run quality checks (e.g., 'npm test', 'pytest', 'ruff check'), and manage git tags. These commands are executed within the local project context to perform analysis requested by the user.\n- [EXTERNAL_DOWNLOADS]: The documentation encourages the use of established security tools like 'gitleaks', 'trufflehog', and 'pip-audit' for identifying vulnerabilities and exposed secrets. It also references standard package manager operations like 'npm audit' and 'pip install' for dependency management and remediation purposes.\n- [SAFE]: The skill actively promotes security best practices, including scanning git history for credentials, rotating compromised secrets, using environment variables for secret management, and pinning CI/CD action versions to full SHAs to prevent supply chain attacks.
Audit Metadata