obsidian-plugin-release
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/release.tsusessh -cto execute Git and GitHub CLI commands. This is used for standard development tasks such as checking branch status, committing changes, pushing tags, and monitoring GitHub Action runs. Inputs like the version number are validated against a strict semver regex before being used in commands. - [EXTERNAL_DOWNLOADS]: The skill triggers
bun run buildandbunx eslint, which are standard package management operations. The GitHub Actions template (templates/release.yml) also usesbun install --frozen-lockfileto ensure reproducible builds from pinned dependencies. - [SAFE]: All external resource references (GitHub Actions, Obsidian community URLs, and ESLint plugins) point to official and well-known repositories or services. The skill implements 'dry-run' capabilities and atomic checks (verifying clean working trees and new version numbers) to prevent accidental misconfiguration.
Audit Metadata