harness-release
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard software release tasks using common CLI tools (git, gh, jq). No malicious patterns such as credential theft, obfuscation, or unauthorized network communication were detected.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute git and GitHub CLI (gh) commands. These operations are within the scope of the skill's stated purpose of automating releases and utilize standard environment configurations.
- [DATA_EXFILTRATION]: The skill interacts with GitHub via the
ghcommand andgit push. These are well-known services and do not constitute unauthorized data exfiltration in the context of a release automation tool.
Audit Metadata