publish-repo
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git,gh(GitHub CLI), andnpxto manage repository state and verify the deployment. - High-impact operations such as flipping repository visibility (
gh repo edit --visibility public) are protected by explicit instructions to seek user confirmation. - Repository hardening is automated via the GitHub API to enable Private Vulnerability Reporting and establish branch rulesets.
- [EXTERNAL_DOWNLOADS]: Fetches the
skillsutility vianpxto perform local verification of the installation flow. - The tool is retrieved from the official npm registry, and the test installation targets the user's own repository to seed telemetry.
- [SAFE]: The skill implements a strong 'human-in-the-loop' design by disabling model invocation to prevent autonomous execution, requiring manual verification of secret scans, and providing a
--dry-runmode to report readiness without making changes.
Audit Metadata