python3-publish-release-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard CI/CD configuration templates for GitHub Actions and GitLab CI. It correctly identifies and promotes security best practices, specifically advocating for Trusted Publishing to eliminate the need for hardcoded or stored API secrets.
- [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted external resources, including official GitHub Actions from
actions/,astral-sh/(uv),pypa/(PyPI), andsoftprops/. These are standard tools for Python development and CI/CD workflows. - [COMMAND_EXECUTION]: The shell commands provided (e.g.,
uv sync,uv build,git tag) are routine operations for building and publishing Python packages. They are presented as templates for the agent to use when generating configuration files, rather than commands executed by the agent itself on the host system in a dangerous manner.
Audit Metadata