The Agent Skills Directory

[SAFE]: The skill implements and teaches security best practices for CI/CD, specifically the migration from long-lived NPM_TOKEN secrets to OIDC-based Trusted Publishing.
[COMMAND_EXECUTION]: The provided GitHub Action templates use npm install -g and node -p to manage versions and extract package information. These are standard operations for release automation and do not involve untrusted input.
[EXTERNAL_DOWNLOADS]: The skill references official GitHub Actions and well-known npm packages for release management. All GitHub Actions in the provided templates are correctly pinned to full commit SHAs, which is a recommended security practice to mitigate supply chain risks.
[INDIRECT_PROMPT_INJECTION]: The skill ingests project metadata (e.g., from package.json) to generate release configurations. It employs structured templates and specific extraction commands that act as a defensive boundary, maintaining a low-risk profile.

node-release