npm-trusted-publishing
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user or agent to run
npx go-tokenless, which downloads and executes the package from the npm registry in the local environment. - [EXTERNAL_DOWNLOADS]: Recommends global installation of a specific npm version (
npm install -g npm@^11.5.1) and references a third-party automation tool hosted athttps://github.com/Continuous-Actions/go-tokenless. - [COMMAND_EXECUTION]: Provides instructions to run several shell commands, including
gh secret deletefor secret management,npm trustfor OIDC configuration, andnpm install -gfor global environment modification. - [INDIRECT_PROMPT_INJECTION]: The skill promotes the use of the
go-tokenlesstool which modifies repository configuration based on existing content, creating a surface for processing potentially untrusted local data. - Ingestion points: Reads repository configuration files including
package.jsonand GitHub Actions workflow files. - Boundary markers: None specified in the provided instructions.
- Capability inventory: Includes file system writes, secret deletion via GitHub CLI, and package installation/execution.
- Sanitization: Not explicitly mentioned for the data processed by the recommended utility.
Audit Metadata