semantic-versioning

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides educational content and configuration templates for semantic versioning automation using well-known DevOps tools.
  • [SAFE]: Configuration examples for GitHub Actions correctly use repository secrets (e.g., ${{ secrets.GITHUB_TOKEN }}) for authentication, adhering to security best practices for credential management.
  • [SAFE]: The inclusion of version bumping scripts (Bash and Python) demonstrates standard practices, such as using subprocess.run with argument lists for shell commands, which mitigates common command injection risks.
  • [SAFE]: All listed dependencies (such as semantic-release, standard-version, and lerna) are reputable packages within the Node.js and software development ecosystems.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:05 AM