docspress-install
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Utilizes GitHub Actions from Automattic's verified official repository and the docspress package from the Node.js registry. The skill mandates using specific versions and full commit SHAs to ensure supply chain integrity.
- [CREDENTIALS_UNSAFE]: Implements secure handling of credentials by expressly forbidding the agent from capturing, printing, or requesting access tokens or secrets, directing the user to input these in their own trusted local terminal.
- [COMMAND_EXECUTION]: Defines CLI interactions using gh (GitHub) and wp (WordPress) which are guarded by explicit user approval steps and initialized with non-destructive flags like dry-run: true and status: draft.
- [SAFE]: Employs a defensive configuration strategy that favors existing repository conventions and resolving current states before attempting new writes, minimizing the risk of conflicting or unauthorized changes.
Audit Metadata