semantic-versioning
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and configuration templates for semantic versioning automation using well-known DevOps tools.
- [SAFE]: Configuration examples for GitHub Actions correctly use repository secrets (e.g.,
${{ secrets.GITHUB_TOKEN }}) for authentication, adhering to security best practices for credential management. - [SAFE]: The inclusion of version bumping scripts (Bash and Python) demonstrates standard practices, such as using
subprocess.runwith argument lists for shell commands, which mitigates common command injection risks. - [SAFE]: All listed dependencies (such as
semantic-release,standard-version, andlerna) are reputable packages within the Node.js and software development ecosystems.
Audit Metadata