steam-publish

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides guidance on handling sensitive Steam credentials and login tokens (config.vdf). It explicitly warns against committing these secrets to version control and recommends using secure CI/CD secrets management, which is a standard security best practice.
  • [COMMAND_EXECUTION]: The skill includes a Python script scripts/check_steam_build.py and instructs users to run it to validate build configurations. Technical analysis of the script confirms it is a read-only utility that parses configuration files and lists directory contents locally. It does not perform network operations, write to the filesystem, or execute arbitrary shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 09:52 PM