deploy
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like npm publish, git push, and local test scripts to manage the release process.
- [SAFE]: Incorporates several proactive safety guardrails:
- Manual Confirmation: A mandatory step requires user approval before the final npm publish command is executed.
- Dry-Run Inspection: Uses npm pack --dry-run to verify package contents before actual distribution.
- Sensitive String Scanning: Employs ripgrep (rg) to check for common placeholders and potentially leaked identifiers in documentation and configuration files.
- Assurance Gates: Enforces code quality tools and functional tests before allowing the publish step to proceed.
Audit Metadata