manage-renv-dependencies
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading R packages from CRAN and GitHub via
install.packages()andrenv::install(). These are standard operations for R dependency management. - [COMMAND_EXECUTION]: Uses R commands (e.g.,
renv::init(),renv::snapshot()) and shell commands (e.g.,git) to manage the project environment and version control. These actions are strictly within the scope of the skill's intended purpose. - [SAFE]: References the
r-lib/actions/setup-renvGitHub Action for CI/CD integration. Ther-liborganization is a well-known and trusted source for R infrastructure tools. - [CREDENTIALS_UNSAFE]: Discusses the use of
GITHUB_PATfor private repositories. The skill correctly advises setting these as environment variables or secrets rather than hardcoding them, adhering to secure credential management practices.
Audit Metadata