release-it
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive reference guide for the
release-ittool. It provides valid configuration examples for JSON, TypeScript, YAML, and TOML formats. - [SAFE]: External resource references (e.g.,
unpkg.comfor JSON schemas,github.comfor plugins) target well-known and trusted technology services. - [SAFE]: The security instructions correctly advise against hardcoding sensitive tokens (e.g.,
GITHUB_TOKEN,NPM_TOKEN) in configuration files, recommending environment variables and secrets instead. - [SAFE]: The CI/CD examples (GitHub Actions and GitLab CI) follow industry best practices, such as using
fetch-depth: 0for git history and proper token handling. - [SAFE]: The custom plugin development section uses standard Node.js APIs and follows the documented extension patterns of the
release-itecosystem.
Audit Metadata