Skills
Navigate
skills/joelfrancisco/skills/publish-and-sync-skills/Gen Agent Trust Hub

publish-and-sync-skills

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Automates repository management through shell commands including git for branch synchronization, node for running local scripts, and jq for manifest validation.
  • [COMMAND_EXECUTION]: Utilizes the GitHub CLI (gh) for remote repository operations such as merging pull requests and managing branches.
  • [EXTERNAL_DOWNLOADS]: Downloads and executes the skills package via npx --yes skills@latest to handle skill discovery and installation.
  • [EXTERNAL_DOWNLOADS]: Fetches skill definitions and content from the JoelFrancisco/skills repository on GitHub, which acts as the authoritative source for the synchronization process.
  • [COMMAND_EXECUTION]: Modifies global configuration and installation paths for multiple agent harnesses (codex, claude-code, hermes-agent, opencode, and pi) using the --global and --yes flags, which is necessary for cross-agent synchronization.
  • [COMMAND_EXECUTION]: Executes the local maintenance script scripts/sync-skills.mjs to regenerate manifests and check release integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 08:21 PM