releasing-clickup-cli
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches package archives from the official npm registry (registry.npmjs.org). This is a standard operation used here to calculate a SHA256 checksum for updating a Homebrew formula.
- [COMMAND_EXECUTION]: Executes standard development commands using
npm,git,gh, andnode. These operations are consistent with the skill's stated purpose of managing a software release lifecycle. - [REMOTE_CODE_EXECUTION]: Manual review of the automated scanner's alert confirms that the script does not pipe remote content into a shell. The command
shasumis used correctly for file verification, and no patterns of unauthorized remote script execution were detected.
Audit Metadata