release-process

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONNO_CODE
Full Analysis
  • Standard Command Execution: The skill provides a set of command-line instructions for developers to follow during a release process. These include version validation using Node.js, repository management with Git, and release automation via the GitHub CLI (gh). These commands are standard for modern software development workflows.
  • Authentication Management: The instructions include steps to verify npm tokens and GitHub secrets. This is a common and necessary part of configuring CI/CD pipelines to ensure automated publishing works correctly without manual intervention (such as 2FA requirements that break CI).
  • Environment Configuration: The skill suggests setting environment variables (e.g., SKIP_BUILD_BUMP) to control build behavior. This is a routine method for managing build flags and ensuring consistency across different environments.
  • Intended Use Case: All identified patterns align with the skill's primary purpose of providing a structured, manual-to-automated release runbook to prevent common deployment errors.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 10:33 AM
Security Audit — agent-trust-hub — release-process