release-publish
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various package management and testing commands including
npm publish,npm install,npm test,npm pack --dry-run,npm view,npx, andnpm lsto manage and verify package releases. - [EXTERNAL_DOWNLOADS]: The skill requires downloading and installing the
compose-agentsmdutility from npm and fetching rule definitions from themetyatech/agent-rulesGitHub repository. These resources are owned by the skill's vendor and are used for maintaining project-specific rules and automation. - [COMMAND_EXECUTION]: The
AGENTS.mdrules specify a mandatory pre-work step where the agent must runcompose-agentsmdto regenerate local rule files, ensuring the environment operates under the latest instructions.
Audit Metadata