opensource-pipeline
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust 'Secure by Default' workflow. It enforces a mandatory sanitization step using a specialized agent to scan for secrets, PII, and internal references before any public release is possible.
- [SAFE]: It utilizes isolated staging environments (
$HOME/opensource-staging/) to ensure private source code is not modified directly and is thoroughly cleaned before being pushed to external services. - [SAFE]: All critical operations, particularly the final publication to GitHub via the
ghCLI, require explicit user approval and manual review of the generated reports (FORK_REPORT.md and SANITIZATION_REPORT.md). - [SAFE]: The protocol includes automated cleanup and retry logic for sanitization failures, preventing the accidental exposure of sensitive data if initial cleaning attempts fail.
Audit Metadata