release-dart-package-action
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses local Python scripts to automate package management tasks such as checking Git status, parsing workflow files, and generating release metadata.
- [SAFE]: Command execution via
subprocess.runandsubprocess.check_outputin the provided scripts uses list-based arguments rather than shell strings, effectively preventing command injection vulnerabilities even when processing external inputs like tag names. - [SAFE]: Data access is limited to project configuration files (e.g.,
pubspec.yaml,CHANGELOG.md) and Git history, which is consistent with the skill's primary purpose. - [SAFE]: No suspicious remote downloads, obfuscated code, or unauthorized network operations were detected. The skill references well-known official resources from the Dart language organization.
Audit Metadata