sdk-release
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with official GitHub repositories and APIs for the OpenHands project to manage releases and PRs. These are intended project management operations.
- [SAFE]: Sensitive tokens are handled via environment variables ($GITHUB_TOKEN) rather than hardcoding, following secure authentication practices.
- [SAFE]: The instruction set includes strong human-in-the-loop (HITL) requirements, explicitly requiring human approval before the agent performs sensitive actions like merging pull requests.
- [SAFE]: Network requests for package verification are directed to the official PyPI registry (pypi.org), a well-known and trusted service.
Audit Metadata