release-bumper

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs repository-local operations to automate software releases. It identifies package structures, calculates semver transitions, and validates changelog formatting according to the Common Changelog specification.
  • [COMMAND_EXECUTION]: The skill executes internal helper scripts (scripts/plan-release.ts, scripts/finalize-release-plan.py, scripts/validate-changelog.py) using the bun and uv runtimes. These scripts interact with the local filesystem and the git and pnpm command-line interfaces to gather repository metadata, which is consistent with its stated purpose of managing releases.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 04:27 PM
Security Audit — agent-trust-hub — release-bumper