release-dart-package-action
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several Python scripts (pre_check.py, prepare_release.py, push_tag_and_print_actions.py) to execute git and dart commands. These scripts are implemented securely, passing command arguments as lists to subprocess functions, which prevents command injection from external inputs like version strings or package names.\n- [EXTERNAL_DOWNLOADS]: The skill identifies and recommends GitHub Action workflows from the official dart-lang repository (dart-lang/setup-dart). This is a well-known and trusted source for Dart development tools.\n- [SAFE]: The skill interacts with standard project files like pubspec.yaml and CHANGELOG.md to update versioning information. It does not attempt to access sensitive system files, credentials, or perform unauthorized network requests.
Audit Metadata