skills/hraness/qmd/release/Gen Agent Trust Hub

release

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several shell scripts (release-context.sh, release.sh, install-hooks.sh, extract-changelog.sh) and CLI tools (gh, pnpm, git) to manage the release lifecycle.
  • release-context.sh (Line 18 in SKILL.md) gathers repository metadata, commit history, and changelog status.
  • install-hooks.sh (called via release-context.sh) manages Git hooks by creating symlinks in .git/hooks, which is a standard development practice for CI/CD enforcement.
  • release.sh (Line 31 in SKILL.md) performs file transformations and version bumps.
  • The skill uses the GitHub CLI (gh) to monitor background CI jobs for the publish.yml workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 04:44 PM
Security Audit — agent-trust-hub — release