steam-publish
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a local Python script,
scripts/check_steam_build.py, designed to validate SteamPipe VDF (Valve KeyValues) configuration files before upload. Analysis of the script confirms it is a read-only utility that uses only Python standard libraries, performs no network operations, and does not access sensitive credential files. - [SAFE]: The documentation explicitly instructs users on security best practices, such as using dedicated build accounts with limited permissions and excluding sensitive files like
config.vdf(Steam login tokens) and passwords from version control. - [COMMAND_EXECUTION]: The skill guides the user through the execution of
steamcmd, which is the official, well-known command-line tool provided by Valve for Steam content management. - [SAFE]: Instructions for CI/CD integration recommend the use of environment secrets and secure artifact caching for session tokens, which aligns with standard industry security practices.
Audit Metadata