release-process
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local commands to manage the release process, including git operations (checkout, pull, push), GitHub CLI operations (auth token retrieval, workflow monitoring, release creation), and local Python script execution via
uvor a virtual environment. - [CREDENTIALS_UNSAFE]: The skill uses
gh auth tokento supply authentication to thechangelog.pyscript. This is standard behavior for GitHub automation and the token is used locally within the environment for legitimate repository management tasks.
Audit Metadata