skills/marcus/sidecar/release-sidecar/Gen Agent Trust Hub

release-sidecar

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes several standard development tools through shell commands to manage the release lifecycle.
  • Executes make targets (e.g., make release, make sync-deps, make install-status) to coordinate release steps.
  • Uses the GitHub CLI (gh) to check CI status via gh run list and verify releases with gh release view.
  • Uses git for tag management and history validation.
  • [EXTERNAL_DOWNLOADS]: Performs a verification step by installing the newly released binary directly from the author's repository.
  • Executes go install github.com/marcus/sidecar/cmd/sidecar@vX.Y.Z to verify the published package.
  • [CREDENTIALS_UNSAFE]: Mentions the requirement for a HOMEBREW_TAP_TOKEN to be present as a GitHub repository secret for the CI pipeline. It correctly instructs the user to ensure the secret exists in the environment rather than hardcoding any values.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 06:46 AM