steam-publish
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides guidance on handling sensitive Steam credentials and login tokens (config.vdf). It explicitly warns against committing these secrets to version control and recommends using secure CI/CD secrets management, which is a standard security best practice.
- [COMMAND_EXECUTION]: The skill includes a Python script
scripts/check_steam_build.pyand instructs users to run it to validate build configurations. Technical analysis of the script confirms it is a read-only utility that parses configuration files and lists directory contents locally. It does not perform network operations, write to the filesystem, or execute arbitrary shell commands.
Audit Metadata