steam-publish

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to download the official Steamworks SDK and the SteamPipe (steamcmd) utility from the legitimate Steamworks partner domain (partner.steamgames.com). These downloads originate from a well-known technology service and are necessary for the skill's stated purpose.
  • [CREDENTIALS_UNSAFE]: The documentation describes handling sensitive credentials such as account passwords and login tokens. It follows security best practices by explicitly warning against committing these secrets to source control and providing instructions for secure management using environment secrets in CI/CD pipelines.
  • [COMMAND_EXECUTION]: The skill provides command patterns for the steamcmd utility to automate the build and upload process. These commands are the standard method for interacting with the Steam platform and do not involve suspicious execution of untrusted code or unauthorized privilege escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 12:59 PM
Security Audit — agent-trust-hub — steam-publish