release-publish

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute various package management and testing commands including npm publish, npm install, npm test, npm pack --dry-run, npm view, npx, and npm ls to manage and verify package releases.
  • [EXTERNAL_DOWNLOADS]: The skill requires downloading and installing the compose-agentsmd utility from npm and fetching rule definitions from the metyatech/agent-rules GitHub repository. These resources are owned by the skill's vendor and are used for maintaining project-specific rules and automation.
  • [COMMAND_EXECUTION]: The AGENTS.md rules specify a mandatory pre-work step where the agent must run compose-agentsmd to regenerate local rule files, ensuring the environment operates under the latest instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 07:52 AM
Security Audit — agent-trust-hub — release-publish