harness-release
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats detected. The skill's instructions are focused on automating legitimate development operations.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute standard git operations (git add,git commit,git tag,git push) and GitHub CLI commands (gh release create). These commands are well-scoped to the repository's context and are standard for release automation. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads project metadata files like
VERSION,package.json, and.claude-plugin/plugin.jsonto manage versioning. This is restricted to local project files and does not involve sensitive system or credential files.
Audit Metadata